Vulnerability in chapter-3/Listing 3.5 - SNS Condition.txt

[brandonslee]

Hi,

to avoid world accessible vulnerability of the SNS, it needs to be added "aws:SourceAccount" in Condition like below.

"Condition": {
"StringEquals": {
"aws:SourceAccount": "111122223333"
},
"ArnLike": {
"aws:SourceArn": "arn:aws:s3:::serverless-video-transcoded"
}
}