AWS CloudFront Insecure SSL Policy Configuration

Google SecOps@GoogleSecOps

•updated Jan 30, 2025•0•44

Detects when an AWS CloudFront distribution is created or updated with an insecure SSL policy, specifically allowing TLSv1, SSLv3, TLSv1_2016, or TLSv1.1_2016. These protocols are considered insecure and can expose data to various attacks.