aws-eks-kubernetes-workload-env-command
Pod, Deployment, Job, and DaemonSet specifications can contain plaintext environment values and command-line credentials.
Where it sits
| location | Kubernetes PodTemplateSpec.containers[].env[].value / command / args |
|---|
| location kind | environment_variable |
|---|
| data kinds | credential password api_key connection_string |
|---|
| emits edge | ContainsCredential |
|---|
| service | EKS (aws:eks) |
|---|
Collection recipe
| access mode | data_plane |
|---|
| operation | Kubernetes GET workload resource |
|---|
| response path | spec.template.spec.containers[].{env[].value,command,args} |
|---|
| encoding | json |
|---|
| params | {"ClusterName": "\u003ccluster\u003e", "Namespace": "\u003cnamespace\u003e", "Resource": "\u003ckind/name\u003e"} |
|---|
Required permissions
eks:AccessKubernetesApi
eks:DescribeCluster
References