Medium
CloudFront
CloudFront distributions should not use deprecated SSL protocols between edge locations and custom origins
NISTISO 27001HIPAA
Description
Flags CloudFront distributions that use deprecated SSL protocols for HTTPS communication with custom origins.
Remediation
To update the Origin SSL Protocols for a CloudFront distribution, see Requiring HTTPS for communication between CloudFront and your custom origin in the Amazon CloudFront Developer Guide.
Steps
- Open the CloudFront console.
- Select the distribution to update.
- Go to the 'Origins and Origin Groups' tab.
- Edit the origin and update the SSL protocols to exclude SSLv3.
- Save the changes.
Compliance
NISTISO 27001HIPAA