aws-opsworks-registered-rds-password
Registered RDS connection records can expose the database password stored for app deployment.
Where it sits
| location | DescribeRdsDbInstances.RdsDbInstances[].DbPassword |
|---|---|
| location kind | secret_value |
| data kinds | password database_credential credential |
| emits edge | ExposesCredential |
| service | OpsWorks (aws:opsworks) |
Collection recipe
| access mode | read_api |
|---|---|
| operation | DescribeRdsDbInstances |
| response path | RdsDbInstances[].DbPassword |
| encoding | string |
| params | {"StackId": "\u003cstack-id\u003e"} |
Required permissions
opsworks:DescribeRdsDbInstances