diff --git a/terraform/byo-vpc/byo-db/main.tf b/terraform/byo-vpc/byo-db/main.tf
index bb0bf7d6e6..a1279c7891 100644
--- a/terraform/byo-vpc/byo-db/main.tf
+++ b/terraform/byo-vpc/byo-db/main.tf
@@ -53,6 +53,9 @@ module "alb" {
       }
     }
   ]
+  
+  # Require TLS 1.2 as earlier versions are insecure
+  listener_ssl_policy_default = "TLS-1-2-2017-01"
 
   https_listeners = [
     {