More Info:

Your SNS topics should be configured to allow access only to trusted AWS accounts in order to protect against unauthorized cross account access. This can prevent data leaks and avoid unexpected costs on your AWS bill.

Risk Level

Medium

Address

Security

Compliance Standards

CBP

Triage and Remediation

Remediation

To remediate the misconfiguration “SNS Topics Should Not Have Cross Account Access” in AWS, you can follow the below steps:

  1. Open the AWS SNS console at https://console.aws.amazon.com/sns/.
  2. Select the SNS topic that you want to remediate.
  3. Click on the “Access Policy” button under the “Permissions” section on the left side of the console.
  4. Review the access policy to ensure that there is no cross-account access granted to the SNS topic.
  5. If there is cross-account access granted, click on the “Edit” button to modify the access policy.
  6. Remove any statements that grant cross-account access to the SNS topic.
  7. Click on the “Save Changes” button to save the modified access policy.

After following these steps, the SNS topic will no longer have cross-account access and the misconfiguration will be remediated.

Additional Reading: