Loading controls...
Control: CloudFront distributions should require encryption in transit
Description
This control checks whether an Amazon CloudFront distribution requires viewers to use HTTPS directly or whether it uses redirection. The control fails if ViewerProtocolPolicy is set to allow-all for defaultCacheBehavior or for cacheBehaviors.
Usage
Run the control in your terminal:
steampipe check terraform_aws_compliance.control.cloudfront_distribution_encryption_in_transit_enabled
Snapshot and share results via Steampipe Cloud:
steampipe loginsteampipe check --share terraform_aws_compliance.control.cloudfront_distribution_encryption_in_transit_enabled
SQL
This control uses a named query:
cloudfront_distribution_encryption_in_transit_enabled