More Info:

Ensures that the CloudFront distribution CNAME record has S3 origin

Risk Level

Medium

Address

Security

Compliance Standards

CBP

Triage and Remediation

Remediation

To remediate the misconfiguration of an AWS CloudFront distribution CNAME record having no S3 origin, you can follow these step-by-step instructions using the AWS Management Console:

  1. Open the AWS Management Console and navigate to the Route 53 service.

  2. In the Route 53 dashboard, click on “Hosted zones” in the left-hand navigation pane.

  3. Select the hosted zone associated with the domain name used for the CloudFront distribution.

  4. In the list of records, locate the CNAME record pointing to the CloudFront distribution.

  5. Click on the record to select it.

  6. Click on the “Edit” button above the record list.

  7. In the “Value/Route traffic to” field, enter the S3 bucket endpoint as the value. You can find the S3 bucket endpoint by navigating to the S3 service, selecting the bucket used as the origin for the CloudFront distribution, and copying the bucket’s endpoint URL.

  8. After entering the S3 bucket endpoint, click on the “Save Record Set” button to save the changes.

  9. Once the changes are saved, the CNAME record will be updated to point to the S3 bucket as the origin for the CloudFront distribution.

  10. Verify the changes by accessing your website or application through the CloudFront distribution URL. The content should now be served from the S3 bucket.

By following these steps, you will successfully remediate the misconfiguration of the AWS CloudFront distribution CNAME record having no S3 origin using the AWS Management Console in Route 53.