aws-ec2-launch-template-user-data-bootstrap
Every launch-template version can retain base64-encoded user data containing long-lived secrets.
Where it sits
| location | DescribeLaunchTemplateVersions.LaunchTemplateVersions[].LaunchTemplateData.UserData |
|---|
| location kind | bootstrap_script |
|---|
| data kinds | credential password api_key access_key secret_key source_code_secret |
|---|
| emits edge | ContainsCredential |
|---|
| service | EC2 (aws:ec2) |
|---|
Collection recipe
| access mode | read_api |
|---|
| operation | DescribeLaunchTemplateVersions |
|---|
| response path | LaunchTemplateVersions[].LaunchTemplateData.UserData |
|---|
| encoding | base64 |
|---|
| params | {"LaunchTemplateId": "\u003ctemplate-id\u003e", "Versions": ["$All"]} |
|---|
Required permissions
ec2:DescribeLaunchTemplateVersions
References