duo-labs / duo-labs/cloudmapper

audit: Check for CloudFront redirect to https

Open
#276 0 comments 0 reactions 0 assignees View on GitHub
audit
Dominant language
JavaScript
Stars
6.3k
Forks
836
PR merge metrics
No merged PRs in 30d

Description

Ensure CloudFront is not using `allow-all` for its `ViewerProtocolPolicy`. This is at `.DistributionList.Items[]|.DefaultCacheBehavior.ViewerProtocolPolicy` . Display the .DomainName and `.Origins[].Items[].DomainName` . See check at https://github.com/cloudsploit/scans/blob/master/plugins/aws/cloudfront/cloudfrontHttpsOnly.js

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.