Detections
Analytics

Ensure valid account number format is used in AWS API Gateway Rest API Policy

LOW

Description

The resource ARN account ID is not valid. Incorrect ARNs may cause issues in DevOps processes. Incorrect ARNs may cause issues in DevOps processes.

Remediation

The following are the general formats for ARNs:
a. arn:partition:service:region:account-id:resource-id
b. arn:partition:service:region:account-id:resource-type/resource-id
c. arn:partition:service:region:account-id:resource-type:resource-id The specific formats depend on the resource.ARNs for some resources omit the region, the account ID, or both the Region and the account ID.

Policy Details

Rule Reference ID: AC_AWS_0504
CSP: AWS
Remediation Available: No
Domain: Security Best Practices
Resource: aws_api_gateway_rest_api_policy
Resource Category: Virtual Network
Resource Type: API Gateway