Data protection

Serverless application with public access

Platform(s)
Compliance Frameworks
  • CCPA
  • ,
  • cis_8
  • ,
  • CPRA
  • ,
  • ISO 27701
  • ,
  • iso_27001_2022
  • ,
  • iso_27002_2022
  • ,
  • Mitre ATT&CK
  • ,
  • mpa
  • ,
  • New Zealand Information Security Manual
  • ,
  • NIST 800-171
  • ,
  • NIST 800-53
  • ,
  • PDPA
  • ,
  • UK Cyber Essentials

Description

Serverless Application Repository allows to find, deploy, and publish serverless applications in the AWS Cloud. It was detected that the serverless application {AwsServerlessApplicationRepositoryApplication}'s policy allows public access. Public access to an application may expose information that you don't want to be stored or made public. Therefore, use the serverless application's policy in order to restrict who can access that application.