aws-elb-oidc-client-secret-write-input
An ALB OIDC action stores a client secret supplied in a write-only request field; DescribeListeners does not return it.
Where it sits
| location | CreateListener.Actions[].AuthenticateOidcConfig.ClientSecret / ModifyListener.Actions[].AuthenticateOidcConfig.ClientSecret |
|---|---|
| location kind | secret_value |
| data kinds | secret_key oauth_token credential |
| emits edge | ContainsCredential |
| service | ELB/ALB/NLB (aws:elb) |
Collection recipe
| access mode | write_only_input |
|---|---|
| operation | CreateListener/ModifyListener |
| response path | request.Actions[].AuthenticateOidcConfig.ClientSecret |
| encoding | string |
| params | {"Actions": "\u003cauthenticate-oidc-action\u003e", "LoadBalancerArn": "\u003calb-arn\u003e"} |
Required permissions
elasticloadbalancing:CreateListener elasticloadbalancing:ModifyListener