aws-ebs-snapshot-description-config
Snapshot descriptions are free-form plaintext and can contain misplaced credentials or internal identifiers.
Where it sits
| location | DescribeSnapshots.Snapshots[].Description |
|---|
| location kind | metadata |
|---|
| data kinds | credential sensitive_data |
|---|
| emits edge | ContainsSecret |
|---|
| service | EBS (aws:ebs) |
|---|
Collection recipe
| access mode | read_api |
|---|
| operation | DescribeSnapshots |
|---|
| response path | Snapshots[].Description |
|---|
| encoding | string |
|---|
| params | {"SnapshotIds": ["\u003csnapshot-id\u003e"]} |
|---|
Required permissions
ec2:DescribeSnapshots
References