MEDIUM
Source
CloudSploit
ID
cloudfront-geo-restriction

CloudFront Geo Restriction

Ensure that geo-restriction feature is enabled for your CloudFront distribution to allow or block location-based access.

AWS CloudFront geo restriction feature can be used to assist in mitigation of Distributed Denial of Service (DDoS) attacks.

Enable CloudFront geo restriction to whitelist or block location-based access.