Faster Amazon Web Services cloud connections with TLS 1.3

by Kate Rodgers , Janelle Hopper , James McDuffie , and Scott Malkie | on

September 13, 2023 : Over 65% of Amazon Web Services service API endpoints now support TLS version 1.3. We are continuing work to enable TLS version 1.3 on Amazon Web Services service API endpoints globally.

At Amazon Web Services (Amazon Web Services) , we strive to continuously improve customer experience by delivering a cloud computing environment that supports the most modern security technologies. To improve the overall performance of your connections, we have already started to enable TLS version 1.3 globally across our Amazon Web Services service API endpoints, and will complete this process by December 31, 2023. By using TLS 1.3, you can decrease your connection time by removing one network round trip for every connection request, and can benefit from some of the most modern and secure cryptographic cipher suites available today.

If you are using current software tools (2014 or later) including our Amazon Web Services SDKs or Amazon Web Services Command Line Interface (Amazon Web Services CLI) , you will automatically receive the benefits of TLS 1.3 with no action required on your part. This is because Amazon Web Services services will negotiate the highest TLS protocol version that your client software supports. If you want to continue using TLS 1.2, you will still have full control through your client configurations. Amazon Web Services will retain support for TLS 1.2, in addition to TLS 1.3, into the foreseeable future. Meanwhile, here’s the latest information on the on-going deprecation of TLS 1.0/1.1 .

If you have any questions, start a new thread on Amazon Web Services re:Post , or contact Amazon Web Services Support or your technical account manager. If you have feedback about this post, submit comments in the Comments section below.

Want more Amazon Web Services Security how-to content, news, and feature announcements? Follow us on Twitter .

Kate Rodgers

Kate Rodgers

Kate is a Senior Technical Program Manager in Amazon Web Services Security with over 10 years of experience in industry as an engineer and program manager. Today she works with Amazon Web Services services, infrastructure, and administrative teams to drive innovative solutions that improve the Amazon Web Services security posture.

James McDuffie

James McDuffie

James is a Senior Technical Account Manager. He has over 20 years of experience in software development, with previous roles in Software and Hardware Security Architecture in Industrial IoT. He is an active member of the Amazon Web Services Security community, and he works closely with our customers to help them solve complex security challenges at scale.

Author

Janelle Hopper

Janelle is a Senior Technical Program Manager in Amazon Web Services Security with over 25 years of experience in the IT security field. She works with Amazon Web Services services, infrastructure, and administrative teams to identify and drive innovative solutions that improve the Amazon Web Services security posture.

Scott Malkie

Scott Malkie

Scott is a Senior Technical Program Manager on the Compliance Remediation team in Amazon Web Services Security, with over 20 years of experience in information systems and security. He specializes in driving large-scale, cross-functional programs that enhance the security, performance, and reliability of Amazon Web Services.

The mentioned AWS GenAI Services service names relating to generative AI are only available or previewed in the Global Regions. Amazon Web Services China promotes AWS GenAI Services relating to generative AI solely for China-to-global business purposes and/or advanced technology introduction.