aws-apprunner-build-start-command-config
Build and start command strings can contain inline command-line credentials.
Where it sits
| location | DescribeService.Service.SourceConfiguration.CodeRepository.CodeConfiguration.CodeConfigurationValues.BuildCommand / StartCommand / ImageRepository.ImageConfiguration.StartCommand |
| location kind | command_argument |
| data kinds | credential password api_key connection_string |
| emits edge | ContainsCredential |
| service | App Runner (aws:apprunner) |
Collection recipe
| access mode | read_api |
| operation | DescribeService |
| response path | Service.SourceConfiguration.CodeRepository.CodeConfiguration.CodeConfigurationValues.BuildCommand / Service.SourceConfiguration.CodeRepository.CodeConfiguration.CodeConfigurationValues.StartCommand / Service.SourceConfiguration.ImageRepository.ImageConfiguration.StartCommand |
| encoding | string |
| params | {"ServiceArn": "\u003cservice-arn\u003e"} |
Required permissions
apprunner:DescribeService
References