aws-elb-fixed-response-message-body
ALB fixed-response bodies are customer-controlled plaintext and can accidentally publish secrets to clients.
Where it sits
| location | DescribeRules.Rules[].Actions[].FixedResponseConfig.MessageBody |
|---|---|
| location kind | config_field |
| data kinds | credential api_key sensitive_data |
| emits edge | ContainsSecret |
| service | ELB/ALB/NLB (aws:elb) |
Collection recipe
| access mode | read_api |
|---|---|
| operation | DescribeRules |
| response path | Rules[].Actions[].FixedResponseConfig.MessageBody |
| encoding | string |
| params | {"ListenerArn": "\u003clistener-arn\u003e"} |
Required permissions
elasticloadbalancing:DescribeRules