| Plugin Title | CloudFront HTTPS Only |
| Cloud | AWS |
| Category | CloudFront |
| Description | Ensures CloudFront distributions are configured to redirect non-HTTPS traffic to HTTPS. |
| More Info | For maximum security, CloudFront distributions can be configured to only accept HTTPS connections or to redirect HTTP connections to HTTPS. |
| AWS Link | http://docs.aws.amazon.com/AWSJavaScriptSDK/latest/AWS/CloudFront.html |
| Recommended Action | Remove HTTP-only listeners from distributions. |
- Log in to the AWS Management Console.
- Select the "Services" option and search for CloudFront.
- Select the "CloudFront Distribution" that needs to be verified and click on it to open its configuration settings.
- Click the "Behaviors" tab, select the "Behavior" which needs to be verified and click "Edit"
- On the Edit Behavior page scroll down to "Viewer" Settings, verify the "Viewer Protocol Policy" and if "HTTP and HTTPS" is selected than CloudFront allows viewers to access your web content using either HTTP or HTTPS.
- To redirect all HTTP traffic to HTTPS under the "Viewer Protocol Policy" choose "Redirect HTTP to HTTPS" to redirect all HTTP requests to HTTPS.
- If you want to drop all HTTP traffic then under the "Viewer Protocol Policy" choose "HTTPS Only" so CloudFront allows viewers to access your content only if they're using HTTPS.
- Repeat steps number 3 to 7 for all other CloudFront Distributions using HTTP-only listeners.
