aws-account-alternate-contact-pii

Billing, operations, and security alternate contacts expose names, emails, titles, and phone numbers.

awshigh service: aws:account emits ContainsSecret

Where it sits

locationGetAlternateContact.AlternateContact
location kindmetadata
data kindspii sensitive_data
emits edgeContainsSecret
serviceAccount Management (aws:account)

Collection recipe

access moderead_api
operationGetAlternateContact
response pathAlternateContact
encodingjson
params{"AlternateContactType": "\u003cBILLING|OPERATIONS|SECURITY\u003e"}

Required permissions

account:GetAlternateContact

References

move · open · esc close