awslabs/aws-automated-incident-response-and-forensics

The AWSOrgAccessToMemoryModules bucket policy has incorrect permissions

UrfTheManatee opened this issue · 0 comments

The AWSOrgAccessToMemoryModules bucket policy has incorrect permissions, missing the access to the actual bucket.

Referring to

- Sid: AWSOrgAccessToMemoryModules
Principal: "*"
Action:
- s3:Get*
- s3:List*
Resource:
- !Sub "arn:${AWS::Partition}:s3:::${rMemoryModuleBucket}/*"
Effect: "Allow"
Condition:
StringEquals:
aws:PrincipalOrgID: !Sub "${pOrgId}"

The permissions are incorrect as the access to the actual bucket is missing.