aws-batch-job-definition-command-parameters
Job parameters, commands, and arguments are customer-controlled plaintext and are often used to pass credentials.
Where it sits
| location | DescribeJobDefinitions.jobDefinitions[].parameters / containerProperties.command / eksProperties.podProperties.containers[].command|args |
| location kind | command_argument |
| data kinds | credential password api_key sensitive_data |
| emits edge | ContainsCredential |
| service | Batch (aws:batch) |
Collection recipe
| access mode | read_api |
| operation | DescribeJobDefinitions |
| response path | jobDefinitions[].parameters / jobDefinitions[].containerProperties.command / jobDefinitions[].ecsProperties.taskProperties[].containers[].command / jobDefinitions[].eksProperties.podProperties.containers[].command / jobDefinitions[].eksProperties.podProperties.containers[].args |
| encoding | json |
| params | {"jobDefinitionName": "\u003cname\u003e"} |
Required permissions
batch:DescribeJobDefinitions
References