turbot/aws_compliance

Control: CloudFront distributions should have AWS WAF enabled

Description

This control checks whether CloudFront distributions are associated with either AWS WAF or AWS WAFv2 web ACLs. The control fails if the distribution is not associated with a web ACL.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.cloudfront_distribution_waf_enabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.cloudfront_distribution_waf_enabled --share

SQL

This control uses a named query:

cloudfront_distribution_waf_enabled

Tags