cloudfront-sni-enabled

Checks if Amazon CloudFront distributions are using a custom SSL certificate and are configured to use SNI to serve HTTPS requests. The rule is NON_COMPLIANT if a custom SSL certificate is associated but the SSL support method is a dedicated IP address.

Identifier: CLOUDFRONT_SNI_ENABLED

Resource Types: AWS::CloudFront::Distribution

Trigger type: Configuration changes

AWS Region: Only available in US East (N. Virginia) Region

Parameters:

None

AWS CloudFormation template

To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.