aws-kms-key-description-config
KMS key descriptions are free-form plaintext and should not contain confidential values.
Where it sits
| location | DescribeKey.KeyMetadata.Description |
|---|---|
| location kind | config_field |
| data kinds | credential sensitive_data |
| emits edge | ContainsSecret |
| service | KMS (aws:kms) |
Collection recipe
| access mode | read_api |
|---|---|
| operation | DescribeKey |
| response path | KeyMetadata.Description |
| encoding | string |
| params | {"KeyId": "\u003ckey-id\u003e"} |
Required permissions
kms:DescribeKey