Checks if Amazon CloudFront distributions are configured with the specified security policies.The rule is NON_COMPLIANT if a CloudFront Distribution is not configured with security policies that you specify.
Identifier: CLOUDFRONT_SSL_POLICY_CHECK
Resource Types: AWS::CloudFront::Distribution
Trigger type: Configuration changes
AWS Region: Only available in US East (N. Virginia) Region
Parameters:
Comma-separated list of CloudFront distribution security policies for the rule to check. For example: "TLSv1.2_2018, TLSv1.2_2019, TLSv1.2_2021". For a list of valid value, see the Amazon CloudFront Developer Guide.
To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.
cloudfront-sni-enabled
cloudfront-traffic-to-origin-encrypted
Did this page help you? - Yes
Thanks for letting us know we're doing a good job!
If you've got a moment, please tell us what we did right so we can do more of it.
Did this page help you? - No
Thanks for letting us know this page needs work. We're sorry we let you down.
If you've got a moment, please tell us how we can make the documentation better.
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4