Amazon_SNS_6

Ensure SNS Topic is not Exposed to everyone

Description

AWS SNS is a hosted topics service that lets you integrate distributed software systems and components. It provides a generic web services API and it can be accessed by any programming language that the AWS SDK supports.
Public SNS topics potentially expose existing interfaces to unwanted 3rd parties that can tap into an existing data stream, resulting in data leak to an unwanted party.

Remediation

To change the policy using the AWS Console, follow these steps:
1. Log in to the AWS Management Console at https://console.aws.amazon.com/.
2. Open the Amazon SNS console.
3. Select an SNS topic and navigate to the Permissions tab.
4. Select a topic policy, click Edit.
5. Navigate to the Principal section.
6. Clear the Everybody (*) checkbox and enter the AWS account ID of the person allowed or denied (based on your access requirements).
7. To update the policy, select Save Changes.

Service

SNS

Severity

High

Compliance

Mapping

We are now live on AWS Marketplace.
The integrated view of your cloud infrastructure is now easier than ever!