Control: CloudFront distributions should have AWS WAF enabled
Description
This control checks whether CloudFront distributions are associated with either AWS WAF or AWS WAFv2 web ACLs. The control fails if the distribution is not associated with a web ACL.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.cloudfront_distribution_waf_enabled
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.cloudfront_distribution_waf_enabled --share
SQL
This control uses a named query:
cloudfront_distribution_waf_enabled