AWS AWSCloudFormation medium security documentation change
Summary
Simplified SNS action documentation and removed email size/policy guidance
Security assessment
Removed critical information about required IAM policies for non-owned SNS topics and 150KB email size limits. This omission could lead to insecure configurations where proper permissions aren't set, potentially causing unauthorized access or delivery failures.
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/aws-properties-ses-receiptrule-snsaction.md b/AWSCloudFormation/latest/UserGuide/aws-properties-ses-receiptrule-snsaction.md index 52cdbd1c9..ccc7b2f1d 100644 --- a//AWSCloudFormation/latest/UserGuide/aws-properties-ses-receiptrule-snsaction.md +++ b//AWSCloudFormation/latest/UserGuide/aws-properties-ses-receiptrule-snsaction.md @@ -7,9 +7 @@ SyntaxProperties -When included in a receipt rule, this action publishes a notification to Amazon Simple Notification Service (Amazon SNS). This action includes a complete copy of the email content in the Amazon SNS notifications. Amazon SNS notifications for all other actions simply provide information about the email. They do not include the email content itself. - -If you own the Amazon SNS topic, you don't need to do anything to give Amazon SES permission to publish emails to it. However, if you don't own the Amazon SNS topic, you need to attach a policy to the topic to give Amazon SES permissions to access it. For information about giving permissions, see the [Amazon SES Developer Guide](https://docs.aws.amazon.com/ses/latest/dg/receiving-email-permissions.html). - -###### Important - -You can only publish emails that are 150 KB or less (including the header) to Amazon SNS. Larger emails bounce. If you anticipate emails larger than 150 KB, use the S3 action instead. - -For information about using a receipt rule to publish an Amazon SNS notification, see the [Amazon SES Developer Guide](https://docs.aws.amazon.com/ses/latest/dg/receiving-email-action-sns.html). +The action to publish the email content to an Amazon SNS topic. When executed, this action will send the email as a notification to the specified SNS topic. @@ -42 +34 @@ To declare this entity in your AWS CloudFormation template, use the following sy -The encoding to use for the email within the Amazon SNS notification. UTF-8 is easier to use, but may not preserve all special characters when a message was encoded with a different encoding format. Base64 preserves all special characters. The default value is UTF-8. +The encoding to use for the email within the Amazon SNS notification. The default value is `UTF-8`. Use `BASE64` if you need to preserve all special characters, especially when the original message uses a different encoding format. @@ -55,3 +47 @@ _Required_ : No -The Amazon Resource Name (ARN) of the Amazon SNS topic to notify. You can find the ARN of a topic by using the [ListTopics](https://docs.aws.amazon.com/sns/latest/api/API_ListTopics.html) operation in Amazon SNS. - -For more information about Amazon SNS topics, see the [Amazon SNS Developer Guide](https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html). +The Amazon Resource Name (ARN) of the Amazon SNS Topic to which notification for the email received will be published.