If you're using AWS Elastic Load Balancer, then the quick fix is:
1) Select the load balancer you want to edit 2) Click the "Listeners" tab 3) Click "change" under the "Cipher" column for the HTTPS row 4) Select the most recent pre-defined security policy, from 2015-02.
This should get you an A on SSL Lab's test[1]