Enterprise-CMCS/macpro-quickstart-serverless

SHF - macpro-quickstart-serverless - master - MEDIUM - CloudFront.5 CloudFront distributions should have logging enabled

Closed this issue · 0 comments


This issue was generated from Security Hub data and is managed through automation.
Please do not edit the title or body of this issue, or remove the security-hub tag. All other edits/comments are welcome.
Finding Id: arn:aws:securityhub:us-east-1:666736308865:subscription/aws-foundational-security-best-practices/v/1.0.0/CloudFront.5/finding/210a78d7-d570-44cc-99e2-ffb3390dea07


Type of Issue:

  • Security Hub Finding

Title:

CloudFront.5 CloudFront distributions should have logging enabled

Id:

arn:aws:securityhub:us-east-1:666736308865:subscription/aws-foundational-security-best-practices/v/1.0.0/CloudFront.5/finding/210a78d7-d570-44cc-99e2-ffb3390dea07
(You may use this ID to lookup this finding's details in Security Hub)

Description

This control checks to see if server access logging is enabled on Amazon CloudFront Distributions. The control will fail if access logging is not enabled for the distribution.

Remediation

https://docs.aws.amazon.com/console/securityhub/CloudFront.5/remediation

AC:

  • The security hub finding is resolved or suppressed, indicated by a Workflow Status of Resolved or Suppressed.