Query: CloudFront distributions should have origin access identity enabled

Description

This control checks whether an AWS CloudFront distribution with AWS S3 Origin type has Origin Access Identity (OAI) configured. The control fails if OAI is not configured.

Query

Tables used in this query:

• aws_cloudfront_distribution

Controls using this query:

• 13 CloudFront distributions should use origin access control
• CloudFront distributions should have origin access identity enabled

SQL