Control: 4 CloudFront distributions should have origin failover configured
Description
This control checks whether an Amazon CloudFront distribution is configured with an origin group that has two or more origins.
CloudFront origin failover can increase availability. Origin failover automatically redirects traffic to a secondary origin if the primary origin is unavailable or if it returns specific HTTP response status codes.
Remediation
For detailed remediation instructions, see Creating an origin group.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.foundational_security_cloudfront_4Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.foundational_security_cloudfront_4 --shareSQL
This control uses a named query:
cloudfront_distribution_configured_with_origin_failover