The documentation for setting up a CMR subscription instructs the user to create an SQS Queue that allows any SNS topic in all of AWS to send data to it. This is obviously a bad idea. The proper solution is to provide some additional information about the SNS topic that sends the data so that the user can set up their SQS Queue to only accept messages from that particular SNS topic.
https://wiki.earthdata.nasa.gov/spaces/CMR/pages/404522012/CMR+Ingest+Subscriptions
CMR should provide users some information about the sending SNS topic so we can restrict the senders allowed to our subscription SQS queues.
The documentation for setting up a CMR subscription instructs the user to create an SQS Queue that allows any SNS topic in all of AWS to send data to it. This is obviously a bad idea. The proper solution is to provide some additional information about the SNS topic that sends the data so that the user can set up their SQS Queue to only accept messages from that particular SNS topic.
https://wiki.earthdata.nasa.gov/spaces/CMR/pages/404522012/CMR+Ingest+Subscriptions
CMR should provide users some information about the sending SNS topic so we can restrict the senders allowed to our subscription SQS queues.