aws-glue-connection-properties-credentials

Glue connection properties can return plaintext usernames, passwords, URLs, and custom connector credentials when HidePassword is false.

awscritical service: aws:glue emits ExposesCredential

Where it sits

locationGetConnection.Connection.ConnectionProperties.{USERNAME,PASSWORD,JDBC_CONNECTION_URL,CUSTOM_*}
location kindconnection_string
data kindscredential password connection_string database_credential api_key oauth_token
emits edgeExposesCredential
serviceGlue (aws:glue)

Collection recipe

access moderead_api
operationGetConnection
response pathConnection.ConnectionProperties.<key>
encodingmap
params{"HidePassword": false, "Name": "\u003cconnection-name\u003e"}

Required permissions

glue:GetConnection

References

move · open · esc close