The sns topics not publicly accessible check incorrectly flags an SNS topic as publicly accessible when its…
The sns topics not publicly accessible check incorrectly flags an SNS topic as publicly accessible when its…: a task in LegoFlow-SWE (Harbor dataset). The check relies on functions like is condition block restrictive and has restrictive source arn condition to decide whether a condition adequately…
The task
The check relies on functions like `is_condition_block_restrictive` and `has_restrictive_source_arn_condition` to decide whether a condition adequately scopes the allowed principals. Currently these functions expect an account number in the ARN to perform validation, but S3 bucket ARNs have no account ID field,…
Part of Lego-X/LegoFlow-SWE.