Critical
Lambda
Regional
Lambda function policies should prohibit public access
PCI DSSNISTISO 27001
Description
Verifies that Lambda function resource-based policies do not grant public access from outside the account.
Remediation
To remediate this issue, update your function's resource-based policy to remove permissions or to add the AWS:SourceAccount condition.
Steps
- Review the resource-based policy on the Lambda console.
- Identify policy statements that make the policy public.
- Use the AWS CLI to run the remove-permission command.
Compliance
PCI DSSNISTISO 27001