Query: CloudFront distributions should require encryption in transit

Description

This control checks whether an Amazon CloudFront distribution requires viewers to use HTTPS directly or whether it uses redirection. The control fails if ViewerProtocolPolicy is set to allow-all for defaultCacheBehavior or for cacheBehaviors.

Query

Tables used in this query:

• terraform_resource

Controls using this query:

• CloudFront distributions should require encryption in transit

SQL