search

stelligent / cfn_nag

Linting tool for CloudFormation templates
MIT License
1.26k stars 212 forks source link

False positive for `lambda:InvokeFunctionUrl` when `AuthType` is `NONE`. #614

Open moltar opened 2 years ago

moltar commented 2 years ago

Fail:

| FAIL F13
|
| Resource: ["RESTinvokefunctionurlF8"]
| Line Numbers: [1302]
|
| Lambda permission principal should not be wildcard

However, it needs to be a wildcard, when AuthType: NONE.

Docs: https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html#urls-auth-none