AWS SNS Subscription Should Not Use HTTP As Delivery Protocol

Back

More Info:

None of the Amazon SNS subscriptions created within your AWS account should use HTTP instead of HTTPS as delivery protocol in order to enforce SSL encryption for all subscription requests.

Risk Level

High

Address

Security

Compliance Standards

CBP, SOC2, PCIDSS, ISO27001, HIPAA, CIS

Additional Reading:

• https://docs.aws.amazon.com/sns/latest/dg/sns-http-https-endpoint-as-subscriber.html