search

sbarski / serverless-architectures-aws

The code repository for the Serverless Architectures on AWS book
http://book.acloud.guru
MIT License
154 stars 100 forks source link

Vulnerability in chapter-3/Listing 3.5 - SNS Condition.txt #19

Open brandonslee opened 2 years ago

brandonslee commented 2 years ago

Hi,

to avoid world accessible vulnerability of the SNS, it needs to be added "aws:SourceAccount" in Condition like below.

"Condition": { "StringEquals": { "aws:SourceAccount": "111122223333" }, "ArnLike": { "aws:SourceArn": "arn:aws:s3:::serverless-video-transcoded" } }