<  Back to rules search

SNS Topic has restrictions set for publishing



Update your Amazon Simple Notification Service (SNS) topic publishing permissions.


Setting the topic publishing permission to * gives anyone access to publish on a topic. Unauthenticated users can publish arbitrary messages, potentially leading to loss of integrity and denial of service.


From the console

Follow the Preventative best practices docs to learn how to implement least-privilege access or use IAM roles for your applications and AWS services.

From the command line

  1. Update your access control policy with an appropriate Principal ARN. Save the file as policy.json.
  "Statement": [
      "Sid": "console_pub",
      "Effect": "Allow",
      "Principal": {
        "AWS": "arn:aws:iam::123456789012:root"
      "Action": [
  1. Run set-topic-attributes with the ARN of the SNS topic.
aws sns set-topic-attributes
  --topic-arn arn:aws:sns:region:123456789012:YourTopic
  --attribute-name Policy
  --attribute-value file://policy.json