Lambda function URL should require authentication

What it checks

Lambda function URL should require authentication

Where it applies

Terraform: aws_lambda_function_url

CloudFormation: AWS::Lambda::Url

How to fix it

1. Set authorization_type = "AWS_IAM". Callers must sign requests with valid AWS credentials. For public APIs, use API Gateway + Cognito instead of Lambda URLs.

Frameworks

• SOC 2 CC6.1

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules