aws-apigateway-rest-stage-variables

REST API stage variables are plaintext maps and are commonly misused for credentials or backend connection strings.

awscritical service: aws:apigateway emits ContainsCredential

Where it sits

locationGetStage.variables.<value>
location kindenvironment_variable
data kindscredential password api_key connection_string sensitive_data
emits edgeContainsCredential
serviceAPI Gateway (aws:apigateway)

Collection recipe

access moderead_api
operationGetStage
response pathvariables.<value>
encodingmap
params{"restApiId": "\u003crest-api-id\u003e", "stageName": "\u003cstage-name\u003e"}

Required permissions

apigateway:GET

References

move · open · esc close