CloudFront Configuration, Monitoring and Policy

[viviant100]

Checked for duplicates

No - I haven't checked

🧑‍🔬 User Persona(s)

No response

💪 Motivation

...so that I can [why do you want to do this?]

📖 Additional Details

• (1) Disable public access on CloudFront in the dev and test environments.
• (2) Set up notifications and monitoring to alert if CloudFront public access is enabled.
• (3) Configure CloudFront with WAF by default.
• (4) Policy: Only the SA team to spin up cloud resources in the test and prod environments.

Related ticket: DSIO-6069

Acceptance Criteria

Given When I perform Then I expect

⚙️ Engineering Details

No response

🎉 I&T

No response