aws-rds-master-password-write-input
RDS master passwords are plaintext write-only request fields and are never returned by DescribeDBInstances or DescribeDBClusters.
Where it sits
| location | CreateDBInstance.MasterUserPassword / ModifyDBInstance.MasterUserPassword / CreateDBCluster.MasterUserPassword / ModifyDBCluster.MasterUserPassword |
|---|---|
| location kind | secret_value |
| data kinds | password database_credential credential |
| emits edge | ContainsCredential |
| service | RDS/Aurora (aws:rds) |
Collection recipe
| access mode | write_only_input |
|---|---|
| operation | CreateDBInstance/ModifyDBInstance/CreateDBCluster/ModifyDBCluster |
| response path | request.MasterUserPassword |
| encoding | string |
| params | {"DBInstanceIdentifier": "\u003cdb-id-or-cluster-id\u003e"} |
Required permissions
rds:CreateDBInstance rds:ModifyDBInstance rds:CreateDBCluster rds:ModifyDBCluster