CloudFront.12

CloudFront distributions should not point to non-existent S3 origins

Severity

Cloud Platforms

Resources

Related Standards

Automated

HIGH

AWS

Amazon CloudFront

AWS Foundational Best Practice, NIST.800-53.r5,

This control checks whether Amazon CloudFront distributions are pointing to non-existent S3 origins. The control fails for a CloudFront distribution if the origin is configured to point to a non-existent bucket. This control only applies to CloudFront distributions where an S3 bucket without static website hosting is the S3 origin.