diff --git a/en/aws/sns/sns-topic-policies.md b/en/aws/sns/sns-topic-policies.md index cdec32190..2d06659dd 100644 --- a/en/aws/sns/sns-topic-policies.md +++ b/en/aws/sns/sns-topic-policies.md @@ -15,4 +15,13 @@ | **Recommended Action** | Adjust the topic policy to only allow authorized AWS users in known accounts to subscribe. | ## Detailed Remediation Steps - +1. Log in to the AWS Management Console. +2. Select the "Services" option and search for SNS.
+3. In the left navigation panel, select Topics under SNS Dashboard.
+4. Select the Topic by clicking on the ID.
+5. In the Topic configuration page, scroll down and click on "Access policy" tab.
+6. Check the value of "Prinicipal" key. If it's set to (*) everyone then this topic allows access to everyone.
+7. To change the access policy, click on the "Edit" button at the top of the page.
+8. On the "Edit topic" page, scroll down to "Access policy" and in the "JSON editor" change the "Principal" key with the correct IAM role ARN eg. arn:aws:iam::066531304300:user/dev27.
+9. Click on "Save changes" button at the bottom of the page.
+10. Repeat step 3-9 for all other SNS Topics across all regions. diff --git a/resources/aws/sns/sns-topic-policies/step2.png b/resources/aws/sns/sns-topic-policies/step2.png new file mode 100644 index 000000000..740574607 Binary files /dev/null and b/resources/aws/sns/sns-topic-policies/step2.png differ diff --git a/resources/aws/sns/sns-topic-policies/step3.png b/resources/aws/sns/sns-topic-policies/step3.png new file mode 100644 index 000000000..255836599 Binary files /dev/null and b/resources/aws/sns/sns-topic-policies/step3.png differ diff --git a/resources/aws/sns/sns-topic-policies/step4.png b/resources/aws/sns/sns-topic-policies/step4.png new file mode 100644 index 000000000..7ea98e28f Binary files /dev/null and b/resources/aws/sns/sns-topic-policies/step4.png differ diff --git a/resources/aws/sns/sns-topic-policies/step5.png b/resources/aws/sns/sns-topic-policies/step5.png new file mode 100644 index 000000000..a52987d64 Binary files /dev/null and b/resources/aws/sns/sns-topic-policies/step5.png differ diff --git a/resources/aws/sns/sns-topic-policies/step6.png b/resources/aws/sns/sns-topic-policies/step6.png new file mode 100644 index 000000000..cea934170 Binary files /dev/null and b/resources/aws/sns/sns-topic-policies/step6.png differ diff --git a/resources/aws/sns/sns-topic-policies/step7.png b/resources/aws/sns/sns-topic-policies/step7.png new file mode 100644 index 000000000..9370c3bad Binary files /dev/null and b/resources/aws/sns/sns-topic-policies/step7.png differ diff --git a/resources/aws/sns/sns-topic-policies/step8.png b/resources/aws/sns/sns-topic-policies/step8.png new file mode 100644 index 000000000..1fe459deb Binary files /dev/null and b/resources/aws/sns/sns-topic-policies/step8.png differ diff --git a/resources/aws/sns/sns-topic-policies/step9.png b/resources/aws/sns/sns-topic-policies/step9.png new file mode 100644 index 000000000..599f0b8d1 Binary files /dev/null and b/resources/aws/sns/sns-topic-policies/step9.png differ