Perform the following to remove weak ciphers from ELB

1. Login to the AWS Management Console.
2. Navigate to EC2 dashboard
3. In the navigation panel, under Load balancing, click Load Balancers.
4. Select your Elastic Load Balancer.
5. Select the Listeners tab from the bottom panel.
6. In the Cipher column of the HTTPS listener click Change.
7. In the Select a Cipher dialog box, select one of the following options configurations:
   1. Predefined Security Policy:

      Select the latest predefined security policy from the list named “ELBSecurityPolicy-2016-08”

   2. Custom Security Policy:

      Uncheck any insecure / deprecated ciphers from the SSL Ciphers section: click Save.

8. Then click on Save button.

Referrences:

• https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-security-policy-table.html