ssl-tls-management

Process

1. Provision certificates (ACM)
2. Configure auto-renewal
3. Set TLS 1.3 minimum
4. Enable HSTS
5. Configure cipher suites

StudyAbroad-Specific

• ACM certificates for *.studyabroad.com
• HSTS max-age: 1 year
• TLS 1.3 only in production
• Certificate transparency logging