aws-iam-console-password-write-input
An administrator supplies an IAM user's console password in plaintext to the login-profile write API; it is never readable afterward.
Where it sits
| location | CreateLoginProfile.Password / UpdateLoginProfile.Password |
|---|---|
| location kind | secret_value |
| data kinds | password credential |
| emits edge | ContainsCredential |
| service | IAM (aws:iam) |
Collection recipe
| access mode | write_only_input |
|---|---|
| operation | CreateLoginProfile/UpdateLoginProfile |
| response path | request.Password |
| encoding | string |
| params | {"UserName": "\u003cuser-name\u003e"} |
Required permissions
iam:CreateLoginProfile iam:UpdateLoginProfile