search

ks888 / LambStatus

[Maintenance mode] Serverless Status Page System
https://lambstatus.github.io
Apache License 2.0
1.3k stars 119 forks source link

Is the permissive bucket policy necessary? #115

Closed iconara closed 6 years ago

iconara commented 6 years ago

The buckets get created with a very permissive policy, something isn't a problem in itself since they don't contain anything secret, but is something that all security tools complain about. It seems like it shouldn't be necessary since the static assets are served by CloudFront and not directory from the bucket, if I understand things correctly. Would you be open to a PR that removes the permissive bucket policy, or am I missing something that makes it necessary?

ks888 commented 6 years ago

Good point! Certainly the current policy is too permissive and should allow the access only from the CloudFront distributions. I'm definitely open to the PR to fix this. Thank you!