aws-documentdb-master-password-write-input
DocumentDB master passwords are write-only plaintext API inputs.
Where it sits
| location | CreateDBCluster.MasterUserPassword / ModifyDBCluster.MasterUserPassword |
|---|
| location kind | secret_value |
|---|
| data kinds | password database_credential credential |
|---|
| emits edge | ContainsCredential |
|---|
| service | DocumentDB (aws:documentdb) |
|---|
Collection recipe
| access mode | write_only_input |
|---|
| operation | CreateDBCluster/ModifyDBCluster |
|---|
| response path | request.MasterUserPassword |
|---|
| encoding | string |
|---|
| params | {"DBClusterIdentifier": "\u003ccluster-id\u003e"} |
|---|
Required permissions
rds:CreateDBCluster
rds:ModifyDBCluster
References