aws-amplify-app-build-spec
Amplify buildspec YAML contains commands and can hard-code credentials.
Where it sits
| location | GetApp.app.buildSpec |
|---|---|
| location kind | template_document |
| data kinds | source_code_secret credential password api_key connection_string |
| emits edge | ContainsCredential |
| service | Amplify (aws:amplify) |
Collection recipe
| access mode | read_api |
|---|---|
| operation | GetApp |
| response path | app.buildSpec |
| encoding | yaml |
| params | {"appId": "\u003capp-id\u003e"} |
Required permissions
amplify:GetApp