aws-opsworks-app-ssl-private-key

OpsWorks app SSL configuration can expose the PEM private key through DescribeApps.

awscritical service: aws:opsworks emits ExposesCredential

Where it sits

locationDescribeApps.Apps[].SslConfiguration.PrivateKey
location kindcertificate_material
data kindsprivate_key certificate credential
emits edgeExposesCredential
serviceOpsWorks (aws:opsworks)

Collection recipe

access moderead_api
operationDescribeApps
response pathApps[].SslConfiguration.PrivateKey
encodingstring
params{"AppIds": ["\u003capp-id\u003e"]}

Required permissions

opsworks:DescribeApps

References

move · open · esc close