aws-messaging-and-streaming

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [Documentation and Guidance Only]: The entire file contains architectural overviews, comparison tables, and design best practices for AWS technologies. It does not introduce code patterns, system execution triggers, or runtime automation surfaces.
  • [Promotion of Security Best Practices]: The guidelines explicitly caution against bad practices by instructing developers to use AWS Secrets Manager with customer-managed KMS keys for Kafka credentials rather than hardcoding them, and explicitly warns against the 'confused deputy' privilege escalation vector by recommending aws:SourceArn and aws:SourceAccount condition keys in IAM/Resource resource policies.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 11:25 PM