AWS_KMS_8

Ensure Function does not allow unknown cross account access

Description

Amazon Lambda functions are configured to allow access only to trusted AWS accounts in order to protect against unauthorized cross account access (i.e. unknown function invocation requests).Allowing unknown (untrustworthy) AWS accounts to invoke your Amazon Lambda functions can lead to data exposure, data loss and unexpected charges on your AWS monthly bill.

Remediation

2. Navigate to KMS dashboard.

Service

KMS

Severity

Medium

Compliance

Mapping

We are now live on AWS Marketplace.
The integrated view of your cloud infrastructure is now easier than ever!