aws-accessanalyzer-archive-rule-filter-values
Archive-rule filter values are customer-controlled strings and can reveal sensitive principal or resource identifiers.
Where it sits
| location | GetArchiveRule.archiveRule.filter.<criterion>.contains / eq / neq |
|---|---|
| location kind | config_field |
| data kinds | credential sensitive_data pii |
| emits edge | ContainsSecret |
| service | IAM Access Analyzer (aws:accessanalyzer) |
Collection recipe
| access mode | read_api |
|---|---|
| operation | GetArchiveRule |
| response path | archiveRule.filter |
| encoding | json |
| params | {"analyzerName": "\u003canalyzer-name\u003e", "ruleName": "\u003crule-name\u003e"} |
Required permissions
access-analyzer:GetArchiveRule