Skip to content

cloudfront

Checks

  • enable-logging Cloudfront distribution should have Access Logging configured

  • enable-waf CloudFront distribution does not have a WAF in front.

  • enforce-https CloudFront distribution allows unencrypted (HTTP) communications.

  • use-secure-tls-policy CloudFront distribution uses outdated SSL/TLS protocols.