Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: check origin access control usage for cloudfront with s3 origin #1794

Open
wants to merge 7 commits into
base: main
Choose a base branch
from

Conversation

clueleaf
Copy link
Contributor

@clueleaf clueleaf commented Sep 9, 2024

Fixes #1582

CDK now supports S3 Origin Access Control L2 construct. Added a new rule to check if OAC is configured for CloudFront distributions using S3 as an origin.

  • Bumped cdk version used in development
    • Added missing parameters in QuickSight tests accordingly
  • Applied the existing OAI rule only to CloudFront Streaming distributions (CloudFront distributions will not be non-compliant if OAI is not configured any more)
  • Added a new rule checking OAC usage. Included the rule to AWS Solutions packs as AwsSolutions-CFR7

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

doc: AwsSolutions-CFR6 conflicts with AWS recommendation
1 participant