Medium
CloudFront
CloudFront distributions should have WAF enabled
NISTISO 27001
Description
Confirms that CloudFront distributions are associated with an AWS WAF Classic or WAF web ACL.
Remediation
To associate an AWS WAF web ACL with a CloudFront distribution, refer to the Amazon CloudFront Developer Guide.
Steps
- Open the Amazon CloudFront console.
- Choose the distribution to update.
- Navigate to the 'Distribution Settings' and select the 'WAF and Shield' tab.
- Associate a Web ACL with the distribution.
- Save changes.
Compliance
NISTISO 27001