top of page
< Back

AWS Foundational Security Best Practice

CloudFront.12

CloudFront distributions should not point to non-existent S3 origins

Severity

Cloud Platforms

Resources

HIGH

AWS

Amazon CloudFront

This control checks whether Amazon CloudFront distributions are pointing to non-existent S3 origins. The control fails for a CloudFront distribution if the origin is configured to point to a non-existent bucket. This control only applies to CloudFront distributions where an S3 bucket without static website hosting is the S3 origin.

bottom of page