aws-codebuild-build-override-environment-value

Per-build environment overrides are retained on build records and may contain one-time plaintext secrets.

awscritical service: aws:codebuild emits ContainsCredential

Where it sits

locationBatchGetBuilds.builds[].environment.environmentVariables[].value
location kindenvironment_variable
data kindscredential password api_key access_key secret_key connection_string
emits edgeContainsCredential
serviceCodeBuild (aws:codebuild)

Collection recipe

access moderead_api
operationBatchGetBuilds
response pathbuilds[].environment.environmentVariables[].value
encodingstring
params{"ids": ["\u003cbuild-id\u003e"]}

Required permissions

codebuild:BatchGetBuilds

References

move · open · esc close