aws-cloudhsm-hsm-user-password-command-input
CloudHSM user passwords are supplied to the cluster client and can leak through shell history or automation even though they are not AWS control-plane fields.
Where it sits
| location | CloudHSM CLI user create/change-password password input |
|---|
| location kind | secret_value |
|---|
| data kinds | password credential |
|---|
| emits edge | ContainsCredential |
|---|
| service | CloudHSM (aws:cloudhsm) |
|---|
Collection recipe
| access mode | write_only_input |
|---|
| operation | CloudHSM CLI user create / user change-password |
|---|
| response path | request.password |
|---|
| encoding | string |
|---|
| params | {"ClusterId": "\u003ccluster-id\u003e", "UserName": "\u003chsm-user\u003e"} |
|---|
References