aws-lambda-sqs icon indicating copy to clipboard operation
aws-lambda-sqs copied to clipboard

AWS SAR vulnerability in README

Open johspaeth opened this issue 3 years ago • 0 comments

Hi @mengjiann

the README states that deployment is done using AWS SAR. There has been a recent cross-account vulnerability related to AWS SAR and your repo may be affected. In the blog post, you find an explanation, as well as a short explanation of what needs to be fixed.

As your README deployment contains the vulnerability, I suggest updating it. To prevent the vulnerability, you need to add a block

            Condition:
              StringEquals:
                "aws:SourceAccount":  <AWS::AccountId>

johspaeth avatar Sep 25 '21 08:09 johspaeth