AWS Cloudfront best practices | Community
Skip to main content
Answered

AWS Cloudfront best practices

  • May 17, 2022
  • 2 replies
  • 416 views

Hi,

 

I created a cloudfront distribution that pointed to intercom.help for our company and that works fine, it's all set up with no issues. The problem arises when i went to review AWS Security Hub to review best practices and I noticed a critical issue. The title of the best practice is "CloudFront distributions should have a default root object configured". I reviewed the guide to set up a cloudfront distribution from Intercom and it has no mention of setting a root object. I wonder if anyone else has run into this and solved it?

 

I've tried a few potential root objects like /en since that's what it redirects to if i got to intercom.help/company but everything i've tried to add it just redirects to a 404 page.

 

Thanks

Best answer by Lisa B11

Hey @eoin m​ 👋

 

Have you had a look at this article from CloudFront side https://github.com/matt-alex-wong/Intercom-SSL-Setup-Guide/blob/main/README.md. and this https://medium.com/@getsee/make-your-intercom-help-center-https-with-a-custom-domain-2255cba66f50 those may help you out 🙌

 

If not, would you mind sending us a message through the Messenger with a screenshot of your settings and share with us where the issue is happening, our support team can look into this for you in more detail.

2 replies

Forum|alt.badge.img+5
  • Employee
  • Answer
  • May 19, 2022

Hey @eoin m​ 👋

 

Have you had a look at this article from CloudFront side https://github.com/matt-alex-wong/Intercom-SSL-Setup-Guide/blob/main/README.md. and this https://medium.com/@getsee/make-your-intercom-help-center-https-with-a-custom-domain-2255cba66f50 those may help you out 🙌

 

If not, would you mind sending us a message through the Messenger with a screenshot of your settings and share with us where the issue is happening, our support team can look into this for you in more detail.


  • New Participant
  • August 15, 2022

I ran into this as well. I had to set the "Default root object" to just a forward slash to get it to work correctly and resolve the Security Hub alert.

 

image