aws-athena-named-query-string
Saved named-query SQL can persist sensitive literals indefinitely.
Where it sits
| location | GetNamedQuery.NamedQuery.QueryString |
|---|
| location kind | query_text |
|---|
| data kinds | credential password api_key sensitive_data |
|---|
| emits edge | ContainsSecret |
|---|
| service | Athena (aws:athena) |
|---|
Collection recipe
| access mode | read_api |
|---|
| operation | GetNamedQuery |
|---|
| response path | NamedQuery.QueryString |
|---|
| encoding | string |
|---|
| params | {"NamedQueryId": "\u003cnamed-query-id\u003e"} |
|---|
Required permissions
athena:GetNamedQuery
References