[question] Is there a way to disable CloudFront older TLS protocols without a custom domain/certificate ?

[rodrigojv]

I have tried using minimumProtocolVersion but it doesn't seem to work.

const site = new StaticSite(stack, `ReactSite`, {
    buildCommand: "pnpm run build:app",
    buildOutput: "apps/web/dist",
    environment: {
      VITE_API_URL: process.env.VITE_API_URL!
    },

    cdk: {
      distribution: {
        comment: "Custom site CDK distribution",
        minimumProtocolVersion: "TLSv1.2_2021"

My sslscan ouput:

Testing SSL server XXXX.cloudfront.net on port 443 using SNI name XXXX.cloudfront.net

  SSL/TLS Protocols:
SSLv2     disabled
SSLv3     disabled
TLSv1.0   enabled
TLSv1.1   enabled
TLSv1.2   enabled
TLSv1.3   enabled