Patch 467 (#489)

* Update sns-topic-policies.md * Update sns-topic-policies.md * Images Created for all steps * Apply suggestions from code review Co-authored-by: alphadev4 <[email protected]>
aquasecurity · Oct 27, 2022 · 7cec850 · 7cec850
1 parent e2c7346
commit 7cec850
Show file tree

Hide file tree

Showing 9 changed files with 10 additions and 1 deletion.
diff --git a/en/aws/sns/sns-topic-policies.md b/en/aws/sns/sns-topic-policies.md
@@ -15,4 +15,13 @@
 | **Recommended Action** | Adjust the topic policy to only allow authorized AWS users in known accounts to subscribe. |
 
 ## Detailed Remediation Steps
-
+1. Log in to the AWS Management Console.
+2. Select the "Services" option and search for SNS. </br> <img src="/resources/aws/sns/sns-topic-policies/step2.png"/>
+3. In the left navigation panel, select Topics under SNS Dashboard. </br> <img src="/resources/aws/sns/sns-topic-policies/step3.png"/>
+4. Select the Topic by clicking on the ID.</br> <img src="/resources/aws/sns/sns-topic-policies/step4.png"/>
+5. In the Topic configuration page, scroll down and click on "Access policy" tab. </br> <img src="/resources/aws/sns/sns-topic-policies/step5.png"/>
+6. Check the value of "Prinicipal" key. If it's set to (*) everyone then this topic allows access to everyone.</br> <img src="/resources/aws/sns/sns-topic-policies/step6.png"/>
+7. To change the access policy, click on the "Edit" button at the top of the page. </br> <img src="/resources/aws/sns/sns-topic-policies/step7.png"/>
+8. On the "Edit topic" page, scroll down to "Access policy" and in the "JSON editor" change the "Principal" key with the correct IAM role ARN eg. arn:aws:iam::066531304300:user/dev27. </br> <img src="/resources/aws/sns/sns-topic-policies/step8.png"/>
+9. Click on "Save changes" button at the bottom of the page.</br> <img src="/resources/aws/sns/sns-topic-policies/step9.png"/>
+10. Repeat step 3-9 for all other SNS Topics across all regions.
diff --git a/resources/aws/sns/sns-topic-policies/step2.png b/resources/aws/sns/sns-topic-policies/step2.png
diff --git a/resources/aws/sns/sns-topic-policies/step3.png b/resources/aws/sns/sns-topic-policies/step3.png
diff --git a/resources/aws/sns/sns-topic-policies/step4.png b/resources/aws/sns/sns-topic-policies/step4.png
diff --git a/resources/aws/sns/sns-topic-policies/step5.png b/resources/aws/sns/sns-topic-policies/step5.png
diff --git a/resources/aws/sns/sns-topic-policies/step6.png b/resources/aws/sns/sns-topic-policies/step6.png
diff --git a/resources/aws/sns/sns-topic-policies/step7.png b/resources/aws/sns/sns-topic-policies/step7.png
diff --git a/resources/aws/sns/sns-topic-policies/step8.png b/resources/aws/sns/sns-topic-policies/step8.png
diff --git a/resources/aws/sns/sns-topic-policies/step9.png b/resources/aws/sns/sns-topic-policies/step9.png