SNS topic access policy should enforce TLS-only access

What it checks

SNS topic policy: no TLS enforcement condition found.

Where it applies

Terraform: aws_sns_topic_policy, aws_sns_topic

CloudFormation: AWS::SNS::Topic, AWS::SNS::TopicPolicy

How to fix it

1. Add a Deny statement with Condition.Bool["aws:SecureTransport"] = "false" to the SNS topic policy.

Frameworks

• SOC 2 CC6.7
• HIPAA 164.312(e)(1)

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules