Terraform AWS CloudFront¶
Terraform module which creates CloudFront distribution resources on AWS with comprehensive features including custom origins, S3 origins, cache behaviors, WAF integration, and SSL certificates.
Implemented Controls¶
The following compliance controls are implemented in this module.
- CloudFront distributions should have a default root object configured
- CloudFront distributions should require encryption in transit
- CloudFront distributions should have field level encryption enabled
- CloudFront distributions should have geo restriction enabled
- CloudFront distributions should have latest TLS version
- CloudFront distributions access logs should be enabled
- CloudFront distributions should use SNI to serve HTTPS requests
- CloudFront distributions should use custom SSL/TLS certificates
- CloudFront distributions should use the recommended TLS security policy
- CloudFront distributions should have AWS WAF enabled
Compliance.tf registry endpoints¶
module "cloudfront" {
source = "acscessentialeight.compliance.tf/terraform-aws-modules/cloudfront/aws"
version = "<version>"
# ... your arguments here
}
module "cloudfront" {
source = "acscism2023.compliance.tf/terraform-aws-modules/cloudfront/aws"
version = "<version>"
# ... your arguments here
}
module "cloudfront" {
source = "awscontroltower.compliance.tf/terraform-aws-modules/cloudfront/aws"
version = "<version>"
# ... your arguments here
}
module "cloudfront" {
source = "awsgenai.compliance.tf/terraform-aws-modules/cloudfront/aws"
version = "<version>"
# ... your arguments here
}
module "cloudfront" {
source = "awswellarchitected.compliance.tf/terraform-aws-modules/cloudfront/aws"
version = "<version>"
# ... your arguments here
}
module "cloudfront" {
source = "cccsmedium.compliance.tf/terraform-aws-modules/cloudfront/aws"
version = "<version>"
# ... your arguments here
}
module "cloudfront" {
source = "cfrpart11.compliance.tf/terraform-aws-modules/cloudfront/aws"
version = "<version>"
# ... your arguments here
}
module "cloudfront" {
source = "cis.compliance.tf/terraform-aws-modules/cloudfront/aws"
version = "<version>"
# ... your arguments here
}
module "cloudfront" {
source = "cisv500.compliance.tf/terraform-aws-modules/cloudfront/aws"
version = "<version>"
# ... your arguments here
}
module "cloudfront" {
source = "cisv600.compliance.tf/terraform-aws-modules/cloudfront/aws"
version = "<version>"
# ... your arguments here
}
module "cloudfront" {
source = "cisv80ig1.compliance.tf/terraform-aws-modules/cloudfront/aws"
version = "<version>"
# ... your arguments here
}
module "cloudfront" {
source = "cisacyberessentials.compliance.tf/terraform-aws-modules/cloudfront/aws"
version = "<version>"
# ... your arguments here
}
module "cloudfront" {
source = "eugmpannex11.compliance.tf/terraform-aws-modules/cloudfront/aws"
version = "<version>"
# ... your arguments here
}
module "cloudfront" {
source = "fedramplow.compliance.tf/terraform-aws-modules/cloudfront/aws"
version = "<version>"
# ... your arguments here
}
module "cloudfront" {
source = "fedrampmoderate.compliance.tf/terraform-aws-modules/cloudfront/aws"
version = "<version>"
# ... your arguments here
}
module "cloudfront" {
source = "ffiec.compliance.tf/terraform-aws-modules/cloudfront/aws"
version = "<version>"
# ... your arguments here
}
module "cloudfront" {
source = "gdpr.compliance.tf/terraform-aws-modules/cloudfront/aws"
version = "<version>"
# ... your arguments here
}
module "cloudfront" {
source = "hipaa.compliance.tf/terraform-aws-modules/cloudfront/aws"
version = "<version>"
# ... your arguments here
}
module "cloudfront" {
source = "iso27001.compliance.tf/terraform-aws-modules/cloudfront/aws"
version = "<version>"
# ... your arguments here
}
module "cloudfront" {
source = "nist800171.compliance.tf/terraform-aws-modules/cloudfront/aws"
version = "<version>"
# ... your arguments here
}
module "cloudfront" {
source = "nist80053.compliance.tf/terraform-aws-modules/cloudfront/aws"
version = "<version>"
# ... your arguments here
}
module "cloudfront" {
source = "nistcsf.compliance.tf/terraform-aws-modules/cloudfront/aws"
version = "<version>"
# ... your arguments here
}
module "cloudfront" {
source = "nydfs23.compliance.tf/terraform-aws-modules/cloudfront/aws"
version = "<version>"
# ... your arguments here
}
module "cloudfront" {
source = "pcidss.compliance.tf/terraform-aws-modules/cloudfront/aws"
version = "<version>"
# ... your arguments here
}
module "cloudfront" {
source = "rbicybersecurity.compliance.tf/terraform-aws-modules/cloudfront/aws"
version = "<version>"
# ... your arguments here
}
module "cloudfront" {
source = "rbiitfnbfc.compliance.tf/terraform-aws-modules/cloudfront/aws"
version = "<version>"
# ... your arguments here
}
module "cloudfront" {
source = "soc2.compliance.tf/terraform-aws-modules/cloudfront/aws"
version = "<version>"
# ... your arguments here
}
See the Technical Usage Guide to get started and read the Features section for more details on how to customize the module for your requirements.