aws-kms-key-tags-value-config
KMS key tag values are plaintext metadata and are visible to principals with tag-read access.
Where it sits
| location | ListResourceTags.Tags[].TagValue |
|---|---|
| location kind | tag |
| data kinds | credential sensitive_data |
| emits edge | ContainsSecret |
| service | KMS (aws:kms) |
Collection recipe
| access mode | read_api |
|---|---|
| operation | ListResourceTags |
| response path | Tags[].TagValue |
| encoding | string |
| params | {"KeyId": "\u003ckey-id\u003e"} |
Required permissions
kms:ListResourceTags