Query: CloudFront distributions should have AWS WAF enabled

Description

This control checks whether CloudFront distributions are associated with either AWS WAF or AWS WAFv2 web ACLs. The control fails if the distribution is not associated with a web ACL.

Query

Tables used in this query:

• aws_cloudfront_distribution

Controls using this query:

• 6 CloudFront distributions should have AWS WAF enabled
• CloudFront distributions should have AWS WAF enabled

SQL