AWS > Lambda >

Lambda Public Access

HIGH

Source

CloudSploit

lambda-public-access

management console

Lambda Public Access

Ensures Lambda functions are not accessible globally

The Lambda function execution policy should not allow public invocation of the function.

Recommended Actions

Update the Lambda policy to prevent access from the public.

Links

https://docs.aws.amazon.com/lambda/latest/dg/access-control-resource-based.html

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.