diff --git a/aws/eks/waf.tf b/aws/eks/waf.tf
index 47bd5b12f..d3a301548 100644
--- a/aws/eks/waf.tf
+++ b/aws/eks/waf.tf
@@ -279,6 +279,10 @@ resource "aws_wafv2_web_acl" "notification-canada-ca" {
       block {
         custom_response {
           response_code = 204
+          response_header {
+            name  = "Strict-Transport-Security"
+            value = "max-age=63072000; includeSubDomains; preload"
+          }
         }
       }
     }