aws-ds-directory-admin-password-write-input
Directory administrator and reset passwords are supplied in plaintext request fields and are never returned by DescribeDirectories.
Where it sits
| location | CreateMicrosoftAD.Password / ResetUserPassword.NewPassword |
|---|
| location kind | secret_value |
|---|
| data kinds | password credential |
|---|
| emits edge | ContainsCredential |
|---|
| service | Directory Service (aws:ds) |
|---|
Collection recipe
| access mode | write_only_input |
|---|
| operation | CreateMicrosoftAD/ResetUserPassword |
|---|
| response path | request.Password / request.NewPassword |
|---|
| encoding | string |
|---|
| params | {"Name": "\u003cdirectory-domain\u003e"} |
|---|
Required permissions
ds:CreateMicrosoftAD
ds:ResetUserPassword
References