- 필수 기능
- 앱 내
- 서비스 관리
- 인프라스트럭처
- 애플리케이션 성능
- 디지털 경험
- 소프트웨어 제공
- 보안
- 로그 관리
- 관리
- 인프라스트럭처
- ci
- containers
- csm
- ndm
- otel_guides
- overview
- slos
- synthetics
- tests
- 워크플로
KMS keys are assigned a resource-based policy that controls who can use and manage the key.
When the key policy is misconfigured, it can allow any unauthenticated user with knowledge of the key ID to use it for encryption, decryption, signing and verification purposes.
Go to the list of customer-managed KMS keys at https://console.aws.amazon.com/kms/home#/kms/keys.
Click the vulnerable KMS key name.
In the Key Policy tab, remove the statement making the key publicly accessible.
aws kms get-key-policy \
--key-id <KEY_ARN> \
--policy-name default \
--query Policy --output text > key_policy.json
aws kms put-key-policy \
--key-id <KEY_ARN> \
--policy-name default \
--policy file://./key_policy.json