Checks Performed
- AWS Account Should Use CloudFront CDN Service
- Cloudfront Distribution Vulnerable To Takeover
- CloudFront Distributions Should Have Field-Level Encryption Enabled
- CloudFront Distributions Should Have Geo Restriction Enabled
- CloudFront Distributions Should Not Use Insecure SSL Protocols
- CloudFront Distributions Should Use HTTPS For Secure Delivery of Web Content
- CloudFront Distributions Should Use Security Policies With Appropriate Version And Ciphers
- CloudFront Should Be Integrated With AWS WAF
- CloudFront Web Distributions Should Automatically Compress Web Content
- Communication With Viewers Should Be Encrypted Using HTTPS
- Custom SSL Certificate Should Be Set For Amazon CloudFront Distributions
- HTTPS Should Be Enabled On CloudFront Distributions
- Logging Should Be Enabled For CloudFront Distributions
- Origin Access Identity Should Be Enabled For CloudFront Distributions
- Origin Failover Should Be Enabled For CloudFront Distributions
- Web Applications Should Use CDNs