top of page
CloudFront.6
CloudFront distributions should have WAF enabled
Severity
Cloud Platforms
Resources
Related Standards
Automated
MEDIUM
AWS
Amazon CloudFront
AWS Foundational Best Practice, CDR, SOC2,NIST CSF, NIST.800-53.r5,
This control checks to see if Amazon CloudFront distributions are associated with either WAF or WAFv2 web ACLs. The control fails if a CloudFront distribution is not associated with a web ACL.
bottom of page