aws-s3-website-routing-rule-config
Website redirect targets and replacement keys are plaintext and can accidentally embed tokens or sensitive query-like values.
Where it sits
| location | GetBucketWebsite.RoutingRules[].Redirect.ReplaceKeyWith / Redirect.HostName |
|---|
| location kind | config_field |
|---|
| data kinds | credential api_key sensitive_data |
|---|
| emits edge | ContainsSecret |
|---|
| service | S3 (aws:s3) |
|---|
Collection recipe
| access mode | read_api |
|---|
| operation | GetBucketWebsite |
|---|
| response path | RoutingRules[].Redirect |
|---|
| encoding | json |
|---|
| params | {"Bucket": "\u003cbucket\u003e"} |
|---|
Required permissions
References