CloudFront distribution should enforce a minimum TLS version of TLSv1.2

What it checks

CloudFront distribution: minimum TLS version is below TLSv1.2.

Where it applies

Terraform: aws_cloudfront_distribution

CloudFormation: AWS::CloudFront::Distribution

How to fix it

1. Set minimum_protocol_version = "TLSv1.2_2021" in the viewer_certificate block

Frameworks

• AWS FSBP CloudFront.15
• SOC 2 CC6.7

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules