aws-ec2-instance-user-data-bootstrap
Instance user data commonly contains bootstrap scripts and may expose embedded passwords, API keys, or cloud credentials.
Where it sits
| location | DescribeInstanceAttribute.UserData.Value (Attribute=userData) |
|---|
| location kind | bootstrap_script |
|---|
| data kinds | credential password api_key access_key secret_key source_code_secret |
|---|
| emits edge | ContainsCredential |
|---|
| service | EC2 (aws:ec2) |
|---|
Collection recipe
| access mode | read_api |
|---|
| operation | DescribeInstanceAttribute |
|---|
| response path | UserData.Value |
|---|
| encoding | base64 |
|---|
| params | {"Attribute": "userData", "InstanceId": "\u003cinstance-id\u003e"} |
|---|
Required permissions
ec2:DescribeInstanceAttribute
References