CloudFront distributions do not have origin failover configured misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_310
Category - Subcategory	Public Exposure - Load Balancing
Provider	AWS
Severity	MEDIUM
Framework	Terraform, Terraform Plan

Impact

This rule refers to the configuration of origin failover for CloudFront distributions in AWS. An origin failover setup guarantees that if one resource fails, another takes over to keep applications running. Not having an origin failover configuration in CloudFront can lead to service disruptions if the primary resource fails. The rule checks whether origin failover is properly configured and recommends setting it up if not, to ensure resources' high availability and reliability.

How to Fix

Resource: aws_cloudfront_distribution

• Arguments: default_root_object

To fix this issue, you need to set a default root object in your Cloudfront distribution. [source,go]

resource "aws_cloudfront_distribution" "s3_distribution" { .... default_root_object = "index.html" .... }