All checks
Low
CloudFront distributions should have origin failover configured
Checks that the CloudFront distribution has an origin group of two origins, so CloudFront can send a request the primary origin fails to the secondary. Only the group is read: one that no cache behavior uses passes and fails over nothing. Failover covers GET, HEAD and OPTIONS requests only.
- service
- CloudFront
- severity
- Low
- scope
- evaluated once per account
How to fix it
In the console
CloudFront → Distributions → the distribution → Origins → Origin groups
- Origins
- A primary and a secondary origin that can serve the same content, the primary first
- Failover criteria
- Status codes such as 500, 502, 503 and 504; 503 also covers a failed connection and 504 a timeout
- Behaviors → Origin or origin group
- The origin group, on each behavior that must survive an origin outage; this check does not read it
See which of your accounts this check is failing on.
Book a live scan