Network misconfigurations

Event bus exposed to everyone

Risk Level

Informational (4)

Platform(s)
Compliance Frameworks

Description

Amazon EventBridge is a serverless event bus service that allows you to route events between AWS services. Orca has discovered that the event bus '{AwsEventBus}' allows anyone, including unauthorized AWS users, to access it. Unauthorized users may, therefore, perform the actions listed in the event bus' policy.