aws-s3-object-user-metadata

User-defined x-amz-meta-* object metadata is plaintext and may contain tokens or sensitive identifiers.

awshigh service: aws:s3 emits ContainsSecret

Where it sits

locationHeadObject.Metadata.<value>
location kindmetadata
data kindscredential api_key sensitive_data pii
emits edgeContainsSecret
serviceS3 (aws:s3)

Collection recipe

access moderead_api
operationHeadObject
response pathMetadata.<value>
encodingmap
params{"Bucket": "\u003cbucket\u003e", "Key": "\u003cobject-key\u003e", "VersionId": "\u003coptional-version-id\u003e"}

Required permissions

s3:GetObject

References

move · open · esc close