Property
Languageterraform
Severityhigh
Servicesns
ProviderAWS
Vulnerability Typeomission

Description#

The SNS topic is configured without server-side encryption, leaving messages stored in plaintext. This exposes message contents to anyone with access to the topic or its storage.

Impact#

If the SNS topic is compromised, attackers could read sensitive messages, leading to data leaks or exposure of confidential information. This increases the risk of unauthorized data access, compliance violations, and potential reputational damage.

Resolution#

Turn on SNS Topic encryption