Cortex CloudApplication Security
AWS AMI launch permissions are not limited misconfiguration detected in code
Rule Details
Cortex AppSec Rule ID
APPSEC_AWS_205
Category - Subcategory
IAM - Overly Permissive
Provider
AWS
Severity
LOW
Framework
Terraform
Impact
It is recommended not to give the ability to launch AMIs across multiple accounts, and if it is implemented, make sure it is properly used.
How to Fix
[source,go]
resource "aws_ami_launch_permission" "remove_equivalent_block" {
image_id = "ami-2345678"
account_id = "987654321"
}
PreviousSNS topic policy is public and access is not restricted to specific services or principals misconfig
NextAWS Key Management Service (KMS) key is disabled misconfiguration detected in code
Last updated
Was this helpful?
