Secure CloudFront Origin
Detects the use of secure web origins with secure protocols for CloudFront.
Traffic passed between the CloudFront edge nodes and the backend resource should be sent over HTTPS with modern protocols for all web-based origins.
Recommended Actions
Follow the appropriate remediation steps below to resolve the issue.
-
Log in to the AWS Management Console.
-
Select the “Services” option and search for CloudFront.
-
Select the “Distribution” that needs to be verified.
-
Click the “Distribution id” to get into the Distribution’s configuration page.
-
Select the “General” tab and click on “Edit” button under settings.
-
On the Edit Settings page, Scroll to the “Custom SSL certificate - optional” settings and ensure that you have a valid certificate selected from the dropdown if you are using your own certificate.
-
Under “Security policy” ensure TLSv1.2(recommended) or higher protocol is selected.
-
Scroll down and click on “Save changes”.
-
Repeat steps number 5, 6 and 7 to verify other CloudFront Distributions.
-
For distributions not using HTTPS and only using HTTP create a new distribution with similar source but set Viewer Protocol Policy to either HTTP to HTTPS or HTTPS only.
