aws-qldb-ledger-partiql-results
PartiQL query results can expose arbitrary ledger documents containing credentials or sensitive data.
Where it sits
| location | qldb-session:SendCommand.ExecuteStatement.Result.FirstPage.Values[] |
|---|
| location kind | data_record |
|---|
| data kinds | credential password api_key customer_data pii |
|---|
| emits edge | CanReadData |
|---|
| service | QLDB (aws:qldb) |
|---|
Collection recipe
| access mode | data_plane |
|---|
| operation | SendCommand (ExecuteStatement) |
|---|
| response path | ExecuteStatement.Result.FirstPage.Values[] |
|---|
| encoding | binary |
|---|
| params | {"ExecuteStatement": {"Statement": "\u003cSELECT\u003e", "TransactionId": "\u003ctx-id\u003e"}, "SessionToken": "\u003csession-token\u003e"} |
|---|
Required permissions
qldb:SendCommand
qldb:PartiQLSelect
References