TF 0021 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki

Unencrypted SNS topic.

Property Value
Language terraform
Severity high
Service sns
Provider AWS
Vulnerability Type omission

Description

The SNS topic is configured without server-side encryption, leaving messages stored in plaintext. This exposes message contents to anyone with access to the topic or its storage.

Impact

If the SNS topic is compromised, attackers could read sensitive messages, leading to data leaks or exposure of confidential information. This increases the risk of unauthorized data access, compliance violations, and potential reputational damage.

Resolution

Turn on SNS Topic encryption