hard20 pts · first answer countscloud-securityiam-policiesconfused-deputy
Confused deputy with service principals
An SNS topic policy lets the S3 service principal publish to it so that bucket events can be sent. What should you add to stop someone else's bucket from publishing to your topic?
Discussion 0
Join free to post in the discussion.
Related questions
- Who patches the VM operating system?Cloud Engineer
- Principle of least privilegeCloud Engineer
- Protecting the root userCloud Engineer
- What HTTPS protectsCloud Engineer
- Shell access without opening port 22Cloud Engineer
- IAM user vs IAM roleCloud Engineer
- Explicit deny always winsCloud Engineer
- Nothing allowed means deniedCloud Engineer