AWS CloudFront distributions does not have a default root object configured misconfiguration detecte

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_305
Category - Subcategory	Public Exposure - Load Balancing
Provider	AWS
Severity	MEDIUM
Framework	Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	ad2b6315-66d2-4e1c-9fb8-ec28349aeeee

Impact

This rule is checking if a default root object has been configured for Cloudfront distribution in Amazon Web Services (AWS). If not properly configured, it may lead to an undesirable user experience. For example, if a user requests the root URL of your distribution and a root object is not set, Cloudfront returns an XML document that lists contents of the distribution. This is not only unprofessional, but it could potentially expose sensitive information about the infrastructure of your website. Therefore, a default root object, such as index.html, should be configured to provide a more controlled and secure user experience.

How to Fix

Resource: aws_cloudfront_distribution

• Arguments: default_root_object

To fix this issue, you need to set a default root object in your Cloudfront distribution. [source,go]

resource "aws_cloudfront_distribution" "s3_distribution" { .... default_root_object = "index.html" .... }