top of page

CloudFront.6

CloudFront distributions should have WAF enabled

Severity

Cloud Platforms

Resources

Related Standards

Automated

MEDIUM

AWS

Amazon CloudFront

AWS Foundational Best Practice, CDR, SOC2,NIST CSF, NIST.800-53.r5,

This control checks to see if Amazon CloudFront distributions are associated with either WAF or WAFv2 web ACLs. The control fails if a CloudFront distribution is not associated with a web ACL.

bottom of page