Checks/Aws/Test-SqsQueuesNotPubliclyAccessible.ps1
|
function Test-SqsQueuesNotPubliclyAccessible { <# .SYNOPSIS SQS queue policy does not allow public access .DESCRIPTION Amazon SQS queue policies are assessed for **public access**. The finding highlights queues with `Allow` statements using a wildcard `Principal` without restrictive conditions, compared to queues that only grant access to the owning account or explicitly trusted principals. .PARAMETER Check CIEMCheck object containing check metadata. #> [CmdletBinding()] [OutputType([PSCustomObject[]])] param( [Parameter(Mandatory)] [CIEMCheck]$Check ) $ErrorActionPreference = 'Stop' # TODO: Implement check logic based on Prowler check: sqs_queues_not_publicly_accessible [CIEMScanResult]::Create($Check, 'MANUAL', 'This check requires manual implementation. See Prowler check sqs_queues_not_publicly_accessible for reference.', 'N/A', 'sqs Resources') } |