aws-networkfirewall-rule-variable-values

Rule variable definitions expose private network ranges and may contain misplaced sensitive strings.

awsmedium service: aws:networkfirewall emits ContainsSecret

Where it sits

locationDescribeRuleGroup.RuleGroup.RuleVariables.IPSets[].Definition / PortSets[].Definition
location kindconfig_field
data kindssensitive_data pii credential
emits edgeContainsSecret
serviceNetwork Firewall (aws:networkfirewall)

Collection recipe

access moderead_api
operationDescribeRuleGroup
response pathRuleGroup.RuleVariables
encodingjson
params{"RuleGroupArn": "\u003crule-group-arn\u003e"}

Required permissions

network-firewall:DescribeRuleGroup

References

move · open · esc close