duo-labs / duo-labs/cloudmapper
audit: Check for CloudFront redirect to https
Open
audit
- Dominant language
- JavaScript
- Stars
- 6.3k
- Forks
- 836
- PR merge metrics
- No merged PRs in 30d
Description
Ensure CloudFront is not using `allow-all` for its `ViewerProtocolPolicy`. This is at `.DistributionList.Items[]|.DefaultCacheBehavior.ViewerProtocolPolicy` . Display the .DomainName and `.Origins[].Items[].DomainName` . See check at https://github.com/cloudsploit/scans/blob/master/plugins/aws/cloudfront/cloudfrontHttpsOnly.js
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.