aws-sagemaker-studio-lifecycle-content

Studio lifecycle scripts can hard-code credentials installed into every user or app environment.

awscritical service: aws:sagemaker emits ContainsCredential

Where it sits

locationDescribeStudioLifecycleConfig.StudioLifecycleConfigContent
location kindbootstrap_script
data kindscredential password api_key access_key secret_key private_key connection_string
emits edgeContainsCredential
serviceSageMaker (aws:sagemaker)

Collection recipe

access moderead_api
operationDescribeStudioLifecycleConfig
response pathStudioLifecycleConfigContent
encodingbase64
params{"StudioLifecycleConfigName": "\u003cconfig-name\u003e"}

Required permissions

sagemaker:DescribeStudioLifecycleConfig

References

move · open · esc close