Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove non SSL access on artefacts bucket #192

Closed
silavjy opened this issue Jan 20, 2023 · 0 comments
Closed

Remove non SSL access on artefacts bucket #192

silavjy opened this issue Jan 20, 2023 · 0 comments
Assignees
Labels
bug Something isn't working

Comments

@silavjy
Copy link
Contributor

silavjy commented Jan 20, 2023

Reconfigure policy to prevent public access on LambdaArtefactsBucket.

The policy LambdaArtefactBucketPolicy must include

  •             Sid: "AWSAccessArtefactsBucketSSL"
                Action: "s3:*"
                Effect: Deny
                Principal: "*"
                Resource:
                  - Fn::Join:
                    - ""
                    -
                      - !GetAtt LambdaArtefactsBucket.Arn
                  - Fn::Join:
                    - ""
                    -
                      - !GetAtt LambdaArtefactsBucket.Arn
                      - "/*"
                Condition:
                  Bool:
                    "aws:SecureTransport": "false"
    
@silavjy silavjy self-assigned this Jan 20, 2023
@silavjy silavjy added the bug Something isn't working label Jan 20, 2023
@silavjy silavjy changed the title Remove public access on artefacts bucket Remove non SSL access on artefacts bucket Jan 20, 2023
This was referenced Jan 20, 2023
@silavjy silavjy closed this as completed Mar 27, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant