turbot/aws_compliance

Control: CloudFront distributions should use SNI to serve HTTPS requests

Description

This control checks if AWS CloudFront distributions are using a custom SSL/TLS certificate and are configured to use SNI to serve HTTPS requests. This control fails if a custom SSL/TLS certificate is associated but the SSL/TLS support method is a dedicated IP address.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.cloudfront_distribution_sni_enabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.cloudfront_distribution_sni_enabled --share

SQL

This control uses a named query:

cloudfront_distribution_sni_enabled

Tags