aws-s3-object-tags-value-config

S3 object tag values are customer-controlled plaintext.

awsmedium service: aws:s3 emits ContainsSecret

Where it sits

locationGetObjectTagging.TagSet[].Value
location kindtag
data kindscredential sensitive_data pii
emits edgeContainsSecret
serviceS3 (aws:s3)

Collection recipe

access moderead_api
operationGetObjectTagging
response pathTagSet[].Value
encodingstring
params{"Bucket": "\u003cbucket\u003e", "Key": "\u003cobject-key\u003e", "VersionId": "\u003coptional-version-id\u003e"}

Required permissions

s3:GetObjectTagging

References

move · open · esc close