AWS Device Defender: Critical Audit Check for Overly Permissive Policies

AWS Device Defender's IOT_POLICY_OVERLY_PERMISSIVE_CHECK audit check is designed to detect policies that grant publish/subscribe on $aws/things/*. This check is rated critical by AWS, as it can lead to widespread device compromise. The Shark vacuum vulnerability is a real-world example of this misconfiguration.