logo

Database

Aws Serves Content Over Http

Description

Detects AWS CloudFront distributions that allow content to be served over insecure HTTP protocol. This exposes web traffic to potential interception and tampering since HTTP transmits data in plain text, unlike the encrypted HTTPS protocol.

Weakness:

372 - Use of an insecure channel - HTTP

Category: Information Collection

Detection Strategy

    Lists all CloudFront distributions in the AWS account

    For each distribution, retrieves its detailed configuration

    Reports a vulnerability if the distribution settings allow HTTP traffic without requiring HTTPS

    Each finding includes the specific CloudFront distribution ARN and configuration details