aws-cloudwatch-log-group-tags-value-config
CloudWatch Logs resource tag values are plaintext metadata.
Where it sits
| location | logs:ListTagsForResource.tags.<value> |
|---|
| location kind | tag |
|---|
| data kinds | credential sensitive_data |
|---|
| emits edge | ContainsSecret |
|---|
| service | CloudWatch/Logs (aws:cloudwatch) |
|---|
Collection recipe
| access mode | read_api |
|---|
| operation | ListTagsForResource |
|---|
| response path | tags.<value> |
|---|
| encoding | map |
|---|
| params | {"resourceArn": "\u003clog-resource-arn\u003e"} |
|---|
Required permissions
logs:ListTagsForResource
References