aws-datapipeline-pipeline-parameter-values

Pipeline parameter values are plaintext and often feed credential-bearing object fields.

awscritical service: aws:datapipeline emits ContainsCredential

Where it sits

locationGetPipelineDefinition.parameterValues[].stringValue
location kindenvironment_variable
data kindscredential password api_key connection_string sensitive_data
emits edgeContainsCredential
serviceData Pipeline (aws:datapipeline)

Collection recipe

access moderead_api
operationGetPipelineDefinition
response pathparameterValues[].stringValue
encodingstring
params{"pipelineId": "\u003cpipeline-id\u003e"}

Required permissions

datapipeline:GetPipelineDefinition

References

move · open · esc close