AWS Application and Network Load Balancers Now Support Post-Quantum Key Exchange for TLS

This article announces post-quantum key exchange support for AWS Application and Network Load Balancers, enhancing TLS security against future quantum computing threats.

• ALB and NLB now support hybrid post-quantum TLS security policies with ML-KEM algorithm
• Protects against "Harvest Now, Decrypt Later" attacks collecting encrypted data today
• Available in all AWS Commercial, GovCloud, and China regions at no additional cost
• Requires explicit opt-in by updating existing listeners or selecting PQ-TLS policies
• Monitor key exchange usage via ALB connection logs or NLB access logs

This feature future-proofs load balancer infrastructure against quantum computing threats while maintaining backward compatibility through hybrid key exchange approaches.