aws-macie-allow-list-regex-s3-words
Allow-list regexes or word-list objects may contain real identifiers or secrets copied to suppress findings.
Where it sits
| location | GetAllowList.Criteria.Regex / Criteria.S3WordsList.ObjectKey -> S3 object |
|---|
| location kind | config_field |
|---|
| data kinds | credential password api_key sensitive_data |
|---|
| emits edge | ContainsSecret |
|---|
| service | Macie (aws:macie) |
|---|
Collection recipe
| access mode | indirect_destination |
|---|
| operation | GetAllowList then optional s3:GetObject |
|---|
| response path | Criteria.Regex / S3WordsList.ObjectKey -> Body |
|---|
| encoding | string |
|---|
| params | {"Id": "\u003callow-list-id\u003e"} |
|---|
Required permissions
macie2:GetAllowList
s3:GetObject
References