search

stelligent / cfn_nag

Linting tool for CloudFormation templates
MIT License
1.25k stars 209 forks source link

False positive for `lambda:InvokeFunctionUrl` when `AuthType` is `NONE`. #614

Open moltar opened 1 year ago

moltar commented 1 year ago

Fail:

| FAIL F13
|
| Resource: ["RESTinvokefunctionurlF8"]
| Line Numbers: [1302]
|
| Lambda permission principal should not be wildcard

However, it needs to be a wildcard, when AuthType: NONE.

Docs: https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html#urls-auth-none