cloudfront-distribution-key-group-enabled
Checks if Amazon CloudFront distributions are configured to use only trusted key groups for signed URL or signed cookie authentication for all cache behaviors. The rule is NON_COMPLIANT if any cache behavior in the distribution is using trusted signers.
Identifier: CLOUDFRONT_DISTRIBUTION_KEY_GROUP_ENABLED
Resource Types: AWS::CloudFront::Distribution
Trigger type: Configuration changes
AWS Region: Only available in US East (N. Virginia) Region
Parameters:
- None
AWS CloudFormation template
To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.
