aws-sagemaker-notebook-lifecycle-content

Notebook lifecycle scripts are base64-encoded shell scripts and commonly contain package tokens or bootstrap credentials.

awscritical service: aws:sagemaker emits ContainsCredential

Where it sits

locationDescribeNotebookInstanceLifecycleConfig.NotebookInstanceLifecycleConfig.OnCreate[].Content / OnStart[].Content
location kindbootstrap_script
data kindscredential password api_key access_key secret_key private_key connection_string source_code_secret
emits edgeContainsCredential
serviceSageMaker (aws:sagemaker)

Collection recipe

access moderead_api
operationDescribeNotebookInstanceLifecycleConfig
response pathOnCreate[].Content / OnStart[].Content
encodingbase64
params{"NotebookInstanceLifecycleConfigName": "\u003cconfig-name\u003e"}

Required permissions

sagemaker:DescribeNotebookInstanceLifecycleConfig

References

move · open · esc close