top of page
< Back

AWS Foundational Security Best Practice

CloudFront.6

CloudFront distributions should have WAF enabled

Severity

Cloud Platforms

Resources

MEDIUM

AWS

Amazon CloudFront

This control checks to see if Amazon CloudFront distributions are associated with either WAF or WAFv2 web ACLs. The control fails if a CloudFront distribution is not associated with a web ACL.

bottom of page