Create rule S6258[terraform]: Add AWS CloudFront Distributions (#549)

Co-authored-by: Nils Werner <64034005+nils-werner-sonarsource@users.noreply.github.com>
SonarSource · Nov 10, 2021 · 555f37b · 555f37b
1 parent d8c6aac
commit 555f37b
Showing 1 changed file with 20 additions and 0 deletions.
diff --git a/rules/S6258/terraform/rule.adoc b/rules/S6258/terraform/rule.adoc
@@ -14,6 +14,14 @@ resource "aws_s3_bucket" "mynoncompliantbucket" { # Sensitive
 }
 ----
 
+For https://aws.amazon.com/cloudfront/[Amazon CloudFront] distributions:
+
+----
+resource "aws_cloudfront_distribution" "cloudfront_distribution" { # Sensitive
+  default_root_object = "index.html"
+}
+----
+
 For both Amazon https://aws.amazon.com/elasticloadbalancing/classic-load-balancer/[Classic Load Balancing] and https://aws.amazon.com/elasticloadbalancing/application-load-balancer/[Application Load Balancing]:
 
 ----
@@ -46,6 +54,18 @@ resource "aws_s3_bucket" "mycompliantbucket" { # Compliant
 }
 ----
 
+For https://aws.amazon.com/cloudfront/[Amazon CloudFront] distributions:
+
+----
+resource "aws_cloudfront_distribution" "cloudfront_distribution" {
+  default_root_object = "index.html"
+  logging_config {
+    bucket          = "mycompliantbucketname"
+    prefix          = "log/cloudfront-"
+  }
+}
+----
+
 For both Amazon https://aws.amazon.com/elasticloadbalancing/classic-load-balancer/[Classic Load Balancing] and https://aws.amazon.com/elasticloadbalancing/application-load-balancer/[Application Load Balancing]:
 
 ----