AWS Cloudfront Distribution with S3 have Origin Access set to disabled misconfiguration detected in

Rule Details

Cortex AppSec Rule ID	APPSEC2_AWS_46
Category - Subcategory	IAM - Overly Permissive
Provider	AWS
Severity	LOW
Framework	Terraform
Mapped CSPM/KSPM Rule	a1340b61-fd2e-4f5b-a3b6-a867040ecf58

Impact

This rule identifies the AWS CloudFront distributions which are utilizing S3 bucket and have Origin Access Disabled. The origin access identity feature should be enabled for all your AWS CloudFront CDN distributions in order to restrict any direct access to your objects through Amazon S3 URLs.