CloudFront Distributions Should Use Security Policies With Appropriate Version And Ciphers

Back

More Info:

Your Amazon CloudFront distributions should use a security policy with minimum TLSv1.1 or TLSv1.2 and appropriate security ciphers for HTTPS viewer connections.

Risk Level

Medium

Address

Security

Compliance Standards

PCIDSS, HIPAA, MAS, NIST

Additional Reading:

• https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/secure-connections-supported-viewer-protocols-ciphers.html