aws-config-resource-configuration-snapshot
AWS Config stores serialized resource configuration and supplementary data; upstream services redact known passwords, but arbitrary metadata, user data, policies, and custom fields may remain.
Where it sits
location BatchGetResourceConfig.baseConfigurationItems[].configuration / supplementaryConfigurationlocation kind data_recorddata kinds credential password api_key connection_string pii sensitive_data emits edge CanReadDataservice AWS Config (aws:config)
Collection recipe
access mode read_apioperation BatchGetResourceConfigresponse path baseConfigurationItems[].{configuration,supplementaryConfiguration}encoding jsonparams {"resourceKeys": [{"resourceId": "\u003cid\u003e", "resourceType": "\u003ctype\u003e"}]}
Required permissions
config:BatchGetResourceConfig
Copy
References