aws-eks-kubernetes-configmap-data
ConfigMaps are not secret stores but are frequently misused for plaintext credentials and application configuration.
Where it sits
| location | Kubernetes core/v1 ConfigMap.data / binaryData |
|---|
| location kind | config_field |
|---|
| data kinds | credential password api_key connection_string sensitive_data |
|---|
| emits edge | ContainsCredential |
|---|
| service | EKS (aws:eks) |
|---|
Collection recipe
| access mode | data_plane |
|---|
| operation | Kubernetes GET /api/v1/configmaps |
|---|
| response path | items[].data.<value> / binaryData.<value> |
|---|
| encoding | json |
|---|
| params | {"ClusterName": "\u003ccluster\u003e", "Namespace": "\u003cnamespace\u003e"} |
|---|
Required permissions
eks:AccessKubernetesApi
eks:DescribeCluster
References