Free plan Signups are open now. The full audytx engine — Terraform and CloudFormation — is live. The Free plan is 100 scans a month and stays free — paid tiers arrive Nov 01, 2026 from $20/month for unlimited repositories. Try it on your own code.

CloudFront distribution should have a WAF web ACL associated

AWS_CLOUDFRONT_005 MEDIUM Security

What it checks

CloudFront distribution: no WAF web ACL is associated.

Where it applies

Terraform: aws_cloudfront_distribution

CloudFormation: AWS::CloudFront::Distribution

How to fix it

  1. Create a WAFv2 web ACL in us-east-1 with CLOUDFRONT scope and attach AWSManagedRulesCommonRuleSet. Associate it with the distribution.

Frameworks

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules