Query: CloudFront distributions should use SNI to serve HTTPS requests

Description

This control checks if AWS CloudFront distributions are using a custom SSL/TLS certificate and are configured to use SNI to serve HTTPS requests. This control fails if a custom SSL/TLS certificate is associated but the SSL/TLS support method is a dedicated IP address.

Query

Tables used in this query:

• aws_cloudfront_distribution

Controls using this query:

• 8 CloudFront distributions should use SNI to serve HTTPS requests
• CloudFront distributions should use SNI to serve HTTPS requests

SQL