Poisoned Pipeline / Mitigations / M1771

M1771

Regularly review and update permissions

Organizations should review and update the permissions granted to serverless functions on a regular basis.
This can help to identify and remediate any misconfigurations or overly permissive permissions.

Applies to

• T0177 Misconfiguration of serverless workloads

References

• https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/sam-permissions.html