QLDB ledger permissions mode is not set to STANDARD misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_170
Category - Subcategory	Storage - Permissions
Provider	AWS
Severity	MEDIUM
Framework	CloudFormation, Serverless, Terraform, Terraform Plan

Impact

Amazon Quantum Ledger Database (Amazon QLDB) is a fully managed ledger database for cryptographically verifiable transaction logging. You can use the QLDB API or the AWS Command Line Interface (AWS CLI) to create, update, and delete ledgers in Amazon QLDB. You can also list all the ledgers in your account, or get information about a specific ledger.

How to Fix

Resource: AWS::QLDB::Ledger

• Arguments: Properties.PermissionsMode Resources: Default: Type: "AWS::QLDB::Ledger" Properties: ... +[source,go]

---

PermissionsMode: "STANDARD"