Control: CloudFront distributions should use SNI to serve HTTPS requests
Description
This control checks if AWS CloudFront distributions are using a custom SSL/TLS certificate and are configured to use SNI to serve HTTPS requests. This control fails if a custom SSL/TLS certificate is associated but the SSL/TLS support method is a dedicated IP address.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.cloudfront_distribution_sni_enabled
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.cloudfront_distribution_sni_enabled --share
SQL
This control uses a named query:
cloudfront_distribution_sni_enabled