Check provider logo

Check if CloudFront distributions are using deprecated SSL protocols.

cloudfront_distributions_using_deprecated_ssl_protocols

Severitylow
Servicecloudfront
by Prowler
encryption

Check if CloudFront distributions are using deprecated SSL protocols.

Risk

Using insecure ciphers could affect privacy of in transit information.

Run this check with Prowler CLI

prowler aws --checks cloudfront_distributions_using_deprecated_ssl_protocols

Run in Prowler Cloud

ARN template

arn:partition:cloudfront:region:account-id:distribution/resource-id

Remediation

Other

https://docs.prowler.com/checks/aws/networking-policies/networking_33

WUI

Use a Security policy with ciphers that are as strong as possible. Drop legacy and insecure ciphers.

References:
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/secure-connections-supported-viewer-protocols-ciphers.html

Source Code

References

Resource Type

AwsCloudFrontDistribution

Related URL