Critical
Lambda
Regional
Lambda function policies should prohibit public access
PCI DSSNISTISO 27001
Description
Checks whether the Lambda function resource-based policy prohibits public access outside of your account.
Remediation
To remediate this issue, update your function's resource-based policy to remove permissions or to add the AWS:SourceAccount condition.
Steps
- Review the resource-based policy on the Lambda console.
- Identify policy statements that make the policy public.
- Use the AWS CLI to run the remove-permission command.
Compliance
PCI DSSNISTISO 27001