aws-batch-job-definition-command-parameters

Job parameters, commands, and arguments are customer-controlled plaintext and are often used to pass credentials.

awshigh service: aws:batch emits ContainsCredential

Where it sits

locationDescribeJobDefinitions.jobDefinitions[].parameters / containerProperties.command / eksProperties.podProperties.containers[].command|args
location kindcommand_argument
data kindscredential password api_key sensitive_data
emits edgeContainsCredential
serviceBatch (aws:batch)

Collection recipe

access moderead_api
operationDescribeJobDefinitions
response pathjobDefinitions[].parameters / jobDefinitions[].containerProperties.command / jobDefinitions[].ecsProperties.taskProperties[].containers[].command / jobDefinitions[].eksProperties.podProperties.containers[].command / jobDefinitions[].eksProperties.podProperties.containers[].args
encodingjson
params{"jobDefinitionName": "\u003cname\u003e"}

Required permissions

batch:DescribeJobDefinitions

References

move · open · esc close