cloudfront-no-deprecated-ssl-protocols - AWS Config

cloudfront-no-deprecated-ssl-protocols

Checks if CloudFront distributions are using deprecated SSL protocols for HTTPS communication between CloudFront edge locations and custom origins. This rule is NON_COMPLIANT for a CloudFront distribution if any ‘OriginSslProtocols’ includes ‘SSLv3’.

Identifier: CLOUDFRONT_NO_DEPRECATED_SSL_PROTOCOLS

Resource Types: AWS::CloudFront::Distribution

Trigger type: Configuration changes

AWS Region: Only available in US East (N. Virginia) Region

Parameters:

None

AWS CloudFormation template

To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.