CloudFront distributions should be configured for origin failover

Documentos > Datadog Security > OOTB Rules > CloudFront distributions should be configured for origin failover

This page is not yet available in Spanish. We are working on its translation.
If you have any questions or feedback about our current translation project, feel free to reach out to us!

Description

This assessment verifies if an Amazon CloudFront distribution has been set up with an origin grouping that contains at least two origins.

Using CloudFront origin failover has the potential to enhance system reliability. In the event that the primary origin is inaccessible or returns certain HTTP response status codes, origin failover automatically redirects traffic to a secondary origin.

Remediation

For instructions on setting up origin failover for a CloudFront distribution, refer to Creating an origin group in the Amazon CloudFront Developer Guide.