Skip to main content

Lambda Has Public URL

Overview

Lambda functions can have public URLs that allow for direct invocation. This is controlled by a combination of the function URL config and one or more resource policies. To correct this finding, remove the function URL config or set it to IAM auth.

Vendor

AWS

Cloud Service

Lambda

References

https://aws.amazon.com/about-aws/whats-new/2022/04/aws-lambda-function-urls-built-in-https-endpoints/

Severity

3

Item Types

AWS::Lambda::Function