aws-autoscaling-launch-configuration-user-data
Legacy launch configurations retain base64-encoded EC2 user data containing bootstrap secrets.
Where it sits
| location | DescribeLaunchConfigurations.LaunchConfigurations[].UserData |
|---|
| location kind | bootstrap_script |
|---|
| data kinds | credential password api_key access_key secret_key source_code_secret |
|---|
| emits edge | ContainsCredential |
|---|
| service | EC2 Auto Scaling (aws:autoscaling) |
|---|
Collection recipe
| access mode | read_api |
|---|
| operation | DescribeLaunchConfigurations |
|---|
| response path | LaunchConfigurations[].UserData |
|---|
| encoding | base64 |
|---|
| params | {"LaunchConfigurationNames": ["\u003claunch-configuration-name\u003e"]} |
|---|
Required permissions
autoscaling:DescribeLaunchConfigurations
References