aws-codedeploy-revision-bundle-content
Deployment revision bundles can include scripts, configuration files, and hard-coded secrets.
Where it sits
| location | GetDeployment.DeploymentInfo.Revision.S3Location / GitHubLocation -> revision files |
|---|
| location kind | code_artifact |
|---|
| data kinds | source_code_secret credential password api_key private_key connection_string |
|---|
| emits edge | ContainsCredential |
|---|
| service | CodeDeploy (aws:codedeploy) |
|---|
Collection recipe
| access mode | indirect_destination |
|---|
| operation | GetDeployment then s3:GetObject or repository read |
|---|
| response path | DeploymentInfo.Revision -> artifact bytes |
|---|
| encoding | binary |
|---|
| params | {"DeploymentId": "\u003cdeployment-id\u003e"} |
|---|
Required permissions
codedeploy:GetDeployment
s3:GetObject
References