All checks
Low
CloudFront distributions should have origin failover configured
Confirms that CloudFront distributions have an origin group with two or more origins configured for failover.
- service
- CloudFront
- severity
- Low
- scope
- evaluated once per account
How to fix it
Add an origin group holding a primary and a secondary origin, and point the cache behaviors that need to survive an origin outage at that group rather than at a single origin. The check reads only whether a group exists, so a group no behavior targets clears the finding and fails over nothing: retarget at least one behavior. Failover covers GET, HEAD and OPTIONS requests only, so a POST or a PUT to a primary that is down still fails outright.
In the console
CloudFront → Distributions → the distribution → Origins → Origin groups
See which of your accounts this check is failing on.
Book a demo