aws-batch-job-definition-environment-value

Batch job definitions can persist plaintext environment variables across ECS, Fargate, and EKS job backends.

awscritical service: aws:batch emits ContainsCredential

Where it sits

locationDescribeJobDefinitions.jobDefinitions[].containerProperties.environment[].value / ecsProperties.taskProperties[].containers[].environment[].value / eksProperties.podProperties.containers[].env[].value
location kindenvironment_variable
data kindscredential password api_key access_key secret_key connection_string
emits edgeContainsCredential
serviceBatch (aws:batch)

Collection recipe

access moderead_api
operationDescribeJobDefinitions
response pathjobDefinitions[].containerProperties.environment[].value / jobDefinitions[].ecsProperties.taskProperties[].containers[].environment[].value / jobDefinitions[].eksProperties.podProperties.containers[].env[].value
encodingjson
params{"jobDefinitionName": "\u003cname\u003e", "status": "ACTIVE"}

Required permissions

batch:DescribeJobDefinitions

References

move · open · esc close