CloudFront distributions should have a default root object configured
Confirms that CloudFront distributions are configured to return a specific default root object.
- service
- CloudFront
- severity
- High
- scope
- evaluated once per account
How to fix it
Set the distribution's default root object to the name of the object CloudFront should return for the root URL, for example index.html. Write it with no leading slash: /index.html is accepted and then answers the root URL with a 403. The object has to exist at the origin and be readable by CloudFront, or the root URL returns an error in place of whatever it returned before.
In the console
CloudFront → Distributions → the distribution → General → Settings → Default root object
See which of your accounts this check is failing on.
Book a demo