Cloudanix Joins AWS ISV Accelerate Program

Cloudanix

AWS SNS Audit

Your AWS Simple Notification Service (SNS) topics should not allow Everyone to publish in order to protect against attackers or unauthorized users that can publish malicious messages to your topics.

SNS Topics Should Not Allow Global Publishing

Your AWS Simple Notification Service (SNS) topics should not allow Everyone to publish in order to protect against attackers or unauthorized users that can publish malicious messages to your topics.

SNS Topics Should Not Allow Global Subscribe

Your AWS Simple Notification Service (SNS) topics should not allow "Everyone" to subscribe in order to protect the messages published to your topics against attackers or unauthorized personnel.

SNS Topics Should Be Encrypted

Server-Side Encryption (SSE) must be enabled for the SNS topics. This ensures protection of sensitive data delivered as messages to subscribers.

SNS Topics Should Be Encrypted Using KMS CMKs

SNS Topics should be encrypted with Customer managed keys (CMK) instead of AWS managed keys in order to have a more granular control over the SNS data-at-rest encryption and decryption process.

SNS Topics Should Not Be Exposed

There should not be any publicly accessible SNS topics in order to protect them against attackers or unauthorized personnel.

AWS SNS Subscription Should Not Use HTTP As Delivery Protocol

None of the Amazon SNS subscriptions created within your AWS account should use HTTP instead of HTTPS as delivery protocol in order to enforce SSL encryption for all subscription requests.

SNS Topics Should Have Subscription

Your SNS topics should have subscribers. Corrective action must be taken about topics that have no subscribers.

SNS Topics Should Not Have Cross Account Access

Your SNS topics should be configured to allow access only to trusted AWS accounts in order to protect against unauthorized cross account access. This can prevent data leaks and avoid unexpected costs on your AWS bill.

Ready to see your graph?

Connect a cloud account in under 30 minutes. See every finding rooted in identity, asset, and blast radius — with a fix path attached.

Book a Demo

CLOUDANIX

Insights from Cloudanix

Explore guides, checklists, and blogs that simplify cloud security and help you secure your infrastructure.