aws-apprunner-runtime-environment-variables-config

App Runner code and image services expose plaintext runtime environment maps through DescribeService.

awscritical service: aws:apprunner emits ContainsCredential

Where it sits

locationDescribeService.Service.SourceConfiguration.CodeRepository.CodeConfiguration.CodeConfigurationValues.RuntimeEnvironmentVariables / ImageRepository.ImageConfiguration.RuntimeEnvironmentVariables
location kindenvironment_variable
data kindscredential password api_key access_key secret_key connection_string
emits edgeContainsCredential
serviceApp Runner (aws:apprunner)

Collection recipe

access moderead_api
operationDescribeService
response pathService.SourceConfiguration.CodeRepository.CodeConfiguration.CodeConfigurationValues.RuntimeEnvironmentVariables.<value> / Service.SourceConfiguration.ImageRepository.ImageConfiguration.RuntimeEnvironmentVariables.<value>
encodingmap
params{"ServiceArn": "\u003cservice-arn\u003e"}

Required permissions

apprunner:DescribeService

References

move · open · esc close