aws-apprunner-build-start-command-config

Build and start command strings can contain inline command-line credentials.

awshigh service: aws:apprunner emits ContainsCredential

Where it sits

locationDescribeService.Service.SourceConfiguration.CodeRepository.CodeConfiguration.CodeConfigurationValues.BuildCommand / StartCommand / ImageRepository.ImageConfiguration.StartCommand
location kindcommand_argument
data kindscredential password api_key connection_string
emits edgeContainsCredential
serviceApp Runner (aws:apprunner)

Collection recipe

access moderead_api
operationDescribeService
response pathService.SourceConfiguration.CodeRepository.CodeConfiguration.CodeConfigurationValues.BuildCommand / Service.SourceConfiguration.CodeRepository.CodeConfiguration.CodeConfigurationValues.StartCommand / Service.SourceConfiguration.ImageRepository.ImageConfiguration.StartCommand
encodingstring
params{"ServiceArn": "\u003cservice-arn\u003e"}

Required permissions

apprunner:DescribeService

References

move · open · esc close