As per https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-custom-domain-tls-version.html it is possible to restrict aws api gateway to a particular version of TLS. Rather than ...