💼 [SNS.4] SNS topic access policies should not allow public access

• Contextual name: 💼 [SNS.4] SNS topic access policies should not allow public access
• ID: /frameworks/aws-fsbp-v1.0.0/sns/04
• Located in: 💼 Simple Notification Service (SNS)

Description

You use an SNS access policy with a particular topic to restrict who can work with that topic (for example, who can publish messages to it or who can subscribe to it). SNS policies can grant access to other AWS accounts, or to users within your own AWS account. Providing a wildcard (*) in the Principle field of the topic policy and a lack of conditions to limit the topic policy can result in data exfiltration, denial of service, or undesired injection of messages into your service by an attacker.

Similar

• AWS Security Hub
  • https://docs.aws.amazon.com/securityhub/latest/userguide/sns-controls.html#sns-4

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags