CloudFront distribution viewer protocol policy should redirect HTTP to HTTPS

What it checks

CloudFront distribution viewer protocol policy should redirect HTTP to HTTPS

Where it applies

Terraform: aws_cloudfront_distribution

CloudFormation: AWS::CloudFront::Distribution

How to fix it

1. Set viewer_protocol_policy = "redirect-to-https" in default_cache_behavior and all ordered_cache_behavior blocks

Frameworks

• AWS FSBP CloudFront.3
• SOC 2 CC6.7
• PCI-DSS v4.0.1/4.2.1
• HIPAA 164.312(e)(1)

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules