aws-cloudwatch-alarm-description-config
Alarm descriptions are free-form plaintext and can contain incident data or pasted credentials.
Where it sits
| location | DescribeAlarms.MetricAlarms[].AlarmDescription / CompositeAlarms[].AlarmDescription |
|---|---|
| location kind | config_field |
| data kinds | credential sensitive_data pii |
| emits edge | ContainsSecret |
| service | CloudWatch/Logs (aws:cloudwatch) |
Collection recipe
| access mode | read_api |
|---|---|
| operation | DescribeAlarms |
| response path | MetricAlarms[].AlarmDescription / CompositeAlarms[].AlarmDescription |
| encoding | string |
| params | {"AlarmNames": ["\u003calarm-name\u003e"]} |
Required permissions
cloudwatch:DescribeAlarms