Hello,

As a result of #5621, Serverless-created buckets include a bucket policy that is supposed to deny any s3:* Action over that bucket, unless it is performed over HTTPS.

Unfortunately that Bucket policy is incomplete and still allows listing the Bucket content over insecure HTTP connection, if the Principal has permissions to perform that action.

Incorrect (current) Bucket Policy:

I have a lot of calls to json.dumps. This can have exceptions when you serialize data, and sometimes I forget to sort the keys. I should have a generic function that I can call for this purpose.

See how to use a serializer here:
https://github.com/duo-labs/cloudmapper/blob/1015ea8ddef327d29333458ef5f1599f1321ad84/commands/collect.py#L180

Hi,

I wanted to enable binary support on API gateway, but could not find the way to do it via component's inputs.

Is this something that you would consider adding in the future?

If so, I can try to add this feature. It doesn't look too complicated.

Thanks!

In https://github.com/godaddy/kubernetes-external-secrets/blob/master/charts/kubernetes-external-secrets/values.yaml
imagePullSecrets is child of image:

image:
  repository: godaddy/kubernetes-external-secrets
  tag: 6.0.0
  pullPolicy: IfNotPresent
  imagePullSecrets: []

but it templates/deployment.yaml:

it is referenced like

      {{- if .Values.imagePullSecrets }

synk report issue

Description

We are synk (https://snyk.io/) for checking used packages.

Synk is complaining about a security issue for serverless-step-functions.
https://snyk.io/vuln/SNYK-JS-DOTPROP-543489

Additional Data

• Serverless Framework Core Version you're using: 1.64.1
• The Plugin Version you're using: 2.17.1
• Operating System: macOS Majove 10.14