aws_elb_load_balancer_listener_policy

resource "aws_elb" "wu-tang" {
  name = "wu-tang"
  availability_zones = ["us-east-1a"]

  listener {
    instance_port = 443
    instance_protocol = "http"
    lb_port = 443
    lb_protocol = "https"
    ssl_certificate_id = "arn:aws:iam::000000000000:server-certificate/wu-tang.net"
  }

  tags {
    Name = "wu-tang"
  }
}

resource "aws_load_balancer_policy" "wu-tang-ssl" {
  load_balancer_name = "${aws_elb.wu-tang.name}"
  policy_name = "wu-tang-ssl"
  policy_type_name = "SSLNegotiationPolicyType"
  policy_attribute = {
    name = "ECDHE-ECDSA-AES128-GCM-SHA256"
    value = "true"
  }
  policy_attribute = {
    name = "Protocol-TLSv1.2"
    value = "true"
  }
}

resource "aws_load_balancer_listener_policy" "wu-tang-listener-policies-443" {
  load_balancer_name = "${aws_elb.wu-tang.name}"
  load_balancer_port = 443
  policy_names = [
    "${aws_load_balancer_policy.wu-tang-ssl.policy_name}"
  ]
}