Is default_cache_behavior enforced for GDPR?

Yes, This control checks whether an AWS CloudFront distribution requires viewers to use HTTPS directly or whether it uses redirection. The control fails if ViewerProtocolPolicy is set to allow-all for defaultCacheBehavior or for cacheBehaviors.

terraform-aws-modules/cloudfront/aws for GDPR

Registry

Sign inStart free trial

Controls

1 control from GDPR apply to this module.

Control	Clause	Change
CloudFront distributions should require encryption in transitcloudfront_distribution_encryption_in_transit_enabled None	None