cloudfront-security-policy-check
Checks if Amazon CloudFront distributions are using a minimum security policy and cipher suite of TLSv1.2 or greater for viewer connections. This rule is NON_COMPLIANT for a CloudFront distribution if the minimumProtocolVersion is below TLSv1.2_2018.
Identifier: CLOUDFRONT_SECURITY_POLICY_CHECK
Resource Types: AWS::CloudFront::Distribution
Trigger type: Configuration changes
AWS Region: Only available in US East (N. Virginia) Region
Parameters:
- None
AWS CloudFormation template
To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.
