Data protection

SNS topic allow cross account access

Risk Level

Informational (4)

Platform(s)

Description

Simple Notification Service (SNS) is a managed service that provides message delivery from publishers to subscribers (also known as producers and consumers). It was detected that the SNS topic {AwsSnsTopic}'s policy allows cross account access to the following AWS accounts: [{AwsSnsTopic.CrossAccountFindings}]. Unauthorized access to a topic can lead to abuse of the SNS service by a malicious party, by sending an excessive amount of notifications and causing additional billing. Use the SNS topic's policy in order to restrict who can access that topic.