turbot/terraform_aws_compliance

GitHub
Loading controls...

Control: CloudFront distributions should require encryption in transit

Description

This control checks whether an Amazon CloudFront distribution requires viewers to use HTTPS directly or whether it uses redirection. The control fails if ViewerProtocolPolicy is set to allow-all for defaultCacheBehavior or for cacheBehaviors.

Usage

Run the control in your terminal:

steampipe check terraform_aws_compliance.control.cloudfront_distribution_encryption_in_transit_enabled

Snapshot and share results via Steampipe Cloud:

steampipe login
steampipe check --share terraform_aws_compliance.control.cloudfront_distribution_encryption_in_transit_enabled

SQL

This control uses a named query:

cloudfront_distribution_encryption_in_transit_enabled

Tags