Security / Public reference

IAM condition allows every address

An IpAddress or aws:SourceIp value of 0.0.0.0/0, ::/0, or * on a standalone IAM policy or a Serverless iamRoleStatements entry.

What you need to supply

The policy JSON or the Serverless iamRoleStatements entry. Other condition operators are not evaluated.

If it reports a finding

High severity. The suggested next step is to restrict the source address to an approved range.

What this does not prove

A condition of 10.0.0.0/8 or a specific address is not this finding. An Effect of Deny is not this finding.

Condition that this check is written to notice

Condition:
  IpAddress:
    aws:SourceIp: 0.0.0.0/0

All review checks. Reading this page does not submit your infrastructure.