Medium CloudFront

CloudFront distributions should have WAF enabled

NISTISO 27001

Description

Confirms that CloudFront distributions are associated with an AWS WAF Classic or WAF web ACL.


Remediation

To associate an AWS WAF web ACL with a CloudFront distribution, refer to the Amazon CloudFront Developer Guide.

Steps

  1. Open the Amazon CloudFront console.
  2. Choose the distribution to update.
  3. Navigate to the 'Distribution Settings' and select the 'WAF and Shield' tab.
  4. Associate a Web ACL with the distribution.
  5. Save changes.

Compliance

NISTISO 27001