Vulnerability in chapter-3/Listing 3.5 - SNS Condition.txt

[brandonslee]

Hi,

to avoid world accessible vulnerability of the SNS, it needs to be added "aws:SourceAccount" in Condition like below.

"Condition": { "StringEquals": { "aws:SourceAccount": "111122223333" }, "ArnLike": { "aws:SourceArn": "arn:aws:s3:::serverless-video-transcoded" } }