aws-glue-job-default-arguments
Glue job argument maps are plaintext and commonly carry --password, --token, or connection values.
Where it sits
| location | GetJob.Job.DefaultArguments / NonOverridableArguments |
| location kind | environment_variable |
| data kinds | credential password api_key access_key secret_key connection_string |
| emits edge | ContainsCredential |
| service | Glue (aws:glue) |
Collection recipe
| access mode | read_api |
| operation | GetJob |
| response path | Job.{DefaultArguments,NonOverridableArguments} |
| encoding | map |
| params | {"JobName": "\u003cjob-name\u003e"} |
Required permissions
References