aws-samples / aws-security-reference-architecture-examples

Example solutions demonstrating how to implement patterns within the AWS Security Reference Architecture guide using CloudFormation (including Customizations for AWS Control Tower) and Terraform.
Other
982 stars 248 forks source link

[BUG] Usage of IAM Role deployed by SRA for Config results in Critical Security Hub Finding #273

Open janahockenberger opened 17 hours ago

janahockenberger commented 17 hours ago

Describe the bug

When activating the Config Solution in SRA, a dedicated IAM Role gets created. This IAM Role gets categorized as a Critical Finding by Security Hub, as the service linked role should be used here.

Expected behavior

Usage of the service linked Role for the Config Service deployed by SRA

Screenshots

Attached.

Bildschirmfoto 2024-11-27 um 13 45 44