aws-redshift-master-password-write-input

Redshift cluster master passwords are supplied as write-only plaintext API inputs.

awscritical service: aws:redshift emits ContainsCredential

Where it sits

locationCreateCluster.MasterUserPassword / ModifyCluster.MasterUserPassword
location kindsecret_value
data kindspassword database_credential credential
emits edgeContainsCredential
serviceRedshift (aws:redshift)

Collection recipe

access modewrite_only_input
operationCreateCluster/ModifyCluster
response pathrequest.MasterUserPassword
encodingstring
params{"ClusterIdentifier": "\u003ccluster-id\u003e"}

Required permissions

redshift:CreateCluster
redshift:ModifyCluster

References

move · open · esc close