Insufficient logging makes it difficult to detect suspicious attempts, potentially allowing security intrusions to go undetected for an extended period.

Remediation

Enable logging for CloudFront. See https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudfront_distribution#logging_config

Metadata

• Severity: informational
• Slug: cloudfront-insufficient-logging

CWEs

• 778: Insufficient Logging

OWASP

• A09:2021: Security Logging and Monitoring Failures