Query: CloudFront distributions access logs should be enabled

Description

This control checks if AWS CloudFront distributions are configured to capture information from AWS Simple Storage Service (AWS S3) server access logs. This rule is non-compliant if a CloudFront distribution does not have logging configured.

Query

Tables used in this query:

• aws_cloudfront_distribution

Controls using this query:

• 5 CloudFront distributions should have logging enabled
• CloudFront distributions access logs should be enabled

SQL