Aws Cloudfront Logging Disabled
Description
Detects AWS CloudFront distributions that have logging disabled. When CloudFront logging is disabled, there is no audit trail of content access patterns, which impacts security monitoring and incident investigation capabilities.
Detection Strategy
• Scans all CloudFront distributions in the AWS account
• Checks if the logging configuration is disabled (Logging.Enabled = false) for each distribution
• Reports a vulnerability for each CloudFront distribution that has logging disabled
Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your 21-day free trial and discover the benefits of the Continuous Hacking Essential plan. If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' hacking team, fill out this contact form.