Query: CloudFront distributions should not use deprecated SSL protocols between edge locations and custom origins

Description

This control checks if AWS CloudFront distributions are using deprecated SSL protocols for HTTPS communication between CloudFront edge locations and your custom origins. This control fails if a CloudFront distribution has a CustomOriginConfig where OriginSslProtocols includes SSLv3.

Query

Tables used in this query:

• aws_cloudfront_distribution

Controls using this query:

• 10 CloudFront distributions should not use deprecated SSL protocols between edge locations and custom origins
• CloudFront distributions should not use deprecated SSL protocols between edge locations and custom origins

SQL