---
title: cloudfront
---

# cloudfront

## Checks


- [enable-logging](enable-logging) Cloudfront distribution should have Access Logging configured

- [enable-waf](enable-waf) CloudFront distribution does not have a WAF in front.

- [enforce-https](enforce-https) CloudFront distribution allows unencrypted (HTTP) communications.

- [use-secure-tls-policy](use-secure-tls-policy) CloudFront distribution uses outdated SSL/TLS protocols.



