aws-codepipeline-action-configuration-values

Action configuration maps can contain OAuth tokens, deployment parameters, command fragments, or third-party credentials; some provider secrets are redacted but arbitrary values are not.

awscritical service: aws:codepipeline emits ContainsCredential

Where it sits

locationGetPipeline.pipeline.stages[].actions[].configuration.<value>
location kindconfig_field
data kindscredential password api_key oauth_token connection_string sensitive_data
emits edgeContainsCredential
serviceCodePipeline (aws:codepipeline)

Collection recipe

access moderead_api
operationGetPipeline
response pathpipeline.stages[].actions[].configuration.<value>
encodingmap
params{"name": "\u003cpipeline-name\u003e"}

Required permissions

codepipeline:GetPipeline

References

move · open · esc close