aws-detective-resource-tags-value-config

Detective graph tag values are plaintext metadata.

awsmedium service: aws:detective emits ContainsSecret

Where it sits

locationListTagsForResource.Tags.<value>
location kindtag
data kindscredential sensitive_data
emits edgeContainsSecret
serviceDetective (aws:detective)

Collection recipe

access moderead_api
operationListTagsForResource
response pathTags.<value>
encodingmap
params{"ResourceArn": "\u003cgraph-arn\u003e"}

Required permissions

detective:ListTagsForResource

References

move · open · esc close