aws-config-remediation-static-values
Automatic-remediation parameters are plaintext and can pass static credentials or sensitive values into SSM Automation.
Where it sits
| location | DescribeRemediationConfigurations.RemediationConfigurations[].Parameters.<name>.StaticValue.Values[] |
|---|
| location kind | config_field |
|---|
| data kinds | credential password api_key connection_string sensitive_data |
|---|
| emits edge | ContainsCredential |
|---|
| service | AWS Config (aws:config) |
|---|
Collection recipe
| access mode | read_api |
|---|
| operation | DescribeRemediationConfigurations |
|---|
| response path | RemediationConfigurations[].Parameters.<name>.StaticValue.Values[] |
|---|
| encoding | list |
|---|
| params | {"ConfigRuleNames": ["\u003crule-name\u003e"]} |
|---|
Required permissions
config:DescribeRemediationConfigurations
References