SECURITY: Improve validation of SNS subscription confirm (stable) (PR #14672)

An upstream validation bug in the aws-sdk-sns library could enable RCE under certain circumstances. This commit updates the upstream gem, and adds additional validation to provide defense-in-depth.

GitHub