aws-cognito-user-pool-tags-value-config
Cognito user-pool tag values are customer-controlled plaintext.
Where it sits
| location | ListTagsForResource.Tags.<value> |
|---|---|
| location kind | tag |
| data kinds | credential sensitive_data |
| emits edge | ContainsSecret |
| service | Cognito (aws:cognito) |
Collection recipe
| access mode | read_api |
|---|---|
| operation | ListTagsForResource |
| response path | Tags.<value> |
| encoding | map |
| params | {"ResourceArn": "\u003cuser-pool-arn\u003e"} |
Required permissions
cognito-idp:ListTagsForResource