cloudfront-distribution-key-group-enabled
Checks whether Amazon CloudFront distributions use only trusted key groups for signed URL or signed cookie authentication for all cache behaviors. The rule is NON_COMPLIANT if cache behaviors use trusted signers or no authentication is configured.
Identifier: CLOUDFRONT_DISTRIBUTION_KEY_GROUP_ENABLED
Resource Types: AWS::CloudFront::Distribution
Trigger type: Configuration changes
AWS Region: Only available in US East (N. Virginia) Region
Parameters:
- None
AWS CloudFormation template
To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.
