aws-codepipeline-pipeline-variable-default

Pipeline variable defaults are plaintext and should not be used for secrets.

awscritical service: aws:codepipeline emits ContainsCredential

Where it sits

locationGetPipeline.pipeline.variables[].defaultValue
location kindenvironment_variable
data kindscredential password api_key connection_string sensitive_data
emits edgeContainsCredential
serviceCodePipeline (aws:codepipeline)

Collection recipe

access moderead_api
operationGetPipeline
response pathpipeline.variables[].defaultValue
encodingstring
params{"name": "\u003cpipeline-name\u003e"}

Required permissions

codepipeline:GetPipeline

References

move · open · esc close