Skip to content

Latest commit

 

History

History
18 lines (13 loc) · 740 Bytes

sns-topic-policies.md

File metadata and controls

18 lines (13 loc) · 740 Bytes

CloudSploit

AWS / SNS / SNS Topic Policies

Quick Info

Plugin Title SNS Topic Policies
Cloud AWS
Category SNS
Description Ensures SNS topics do not allow global send or subscribe.
More Info SNS policies should not be configured to allow any AWS user to subscribe or send messages. This could result in data leakage or financial DDoS.
AWS Link http://docs.aws.amazon.com/sns/latest/dg/AccessPolicyLanguage.html
Recommended Action Adjust the topic policy to only allow authorized AWS users in known accounts to subscribe.

Detailed Remediation Steps