aws-glue-schema-definition-content

Schema Registry definitions can contain examples, defaults, field names, or literals revealing sensitive data.

awsmedium service: aws:glue emits ContainsSecret

Where it sits

locationGetSchemaVersion.SchemaDefinition
location kinddata_record
data kindscredential sensitive_data pii
emits edgeContainsSecret
serviceGlue (aws:glue)

Collection recipe

access moderead_api
operationGetSchemaVersion
response pathSchemaDefinition
encodingstring
params{"SchemaVersionId": "\u003cschema-version-id\u003e"}

Required permissions

glue:GetSchemaVersion

References

move · open · esc close