aws-cloudfront-key-value-store-value
CloudFront KeyValueStore values are application-controlled strings and can be misused as a secret store.
Where it sits
| location | cloudfront-keyvaluestore:GetKey.Value |
|---|
| location kind | data_record |
|---|
| data kinds | credential password api_key bearer_token sensitive_data |
|---|
| emits edge | CanReadData |
|---|
| service | CloudFront (aws:cloudfront) |
|---|
Collection recipe
| access mode | read_api |
|---|
| operation | GetKey |
|---|
| response path | Value |
|---|
| encoding | string |
|---|
| params | {"Key": "\u003ckey\u003e", "KvsARN": "\u003ckey-value-store-arn\u003e"} |
|---|
Required permissions
cloudfront-keyvaluestore:GetKey
References