You've already forked EjemplosPoliticasAWS
Orden en carpetas
This commit is contained in:
40
CloudFormation/denegarAmazonSNSmenosCloudFormation.json
Normal file
40
CloudFormation/denegarAmazonSNSmenosCloudFormation.json
Normal file
@@ -0,0 +1,40 @@
|
||||
{
|
||||
"Version": "2012-10-17",
|
||||
"Statement": [
|
||||
{
|
||||
"Sid": "DenyAllAwsResourcesOutsideAccountExceptSNS",
|
||||
"Effect": "Deny",
|
||||
"NotAction": [
|
||||
"sns:*"
|
||||
],
|
||||
"Resource": "*",
|
||||
"Condition": {
|
||||
"StringNotEquals": {
|
||||
"aws:ResourceAccount": [
|
||||
"111122223333"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
"Sid": "DenyAllSNSResourcesOutsideAccountExceptCloudFormation",
|
||||
"Effect": "Deny",
|
||||
"Action": [
|
||||
"sns:*"
|
||||
],
|
||||
"Resource": "*",
|
||||
"Condition": {
|
||||
"StringNotEquals": {
|
||||
"aws:ResourceAccount": [
|
||||
"111122223333"
|
||||
]
|
||||
},
|
||||
"ForAllValues:StringNotEquals": {
|
||||
"aws:CalledVia": [
|
||||
"cloudformation.amazonaws.com"
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
Reference in New Issue
Block a user