Query: CloudFront distributions should not point to non-existent S3 origins

Description

This control checks whether AWS CloudFront distributions are pointing to non-existent AWS S3 origins. The control fails for a CloudFront distribution if the origin is configured to point to a non-existent bucket. This control only applies to CloudFront distributions where an S3 bucket without static website hosting is the S3 origin.

Query

Tables used in this query:

• aws_cloudfront_distribution
• aws_s3_bucket

Controls using this query:

• 12 CloudFront distributions should not point to non-existent S3 origins
• CloudFront distributions should not point to non-existent S3 origins

SQL