aws-servicecatalog-provisioning-artifact-template
A provisioning artifact's CloudFormation template can hard-code credentials in parameters, metadata, mappings, properties, or outputs.
Where it sits
| location | DescribeProvisioningArtifact.Info.LoadTemplateFromURL -> CloudFormation template |
|---|
| location kind | iac_template |
|---|
| data kinds | credential password api_key access_key secret_key connection_string source_code_secret |
|---|
| emits edge | ContainsCredential |
|---|
| service | Service Catalog (aws:servicecatalog) |
|---|
Collection recipe
| access mode | indirect_destination |
|---|
| operation | DescribeProvisioningArtifact then template URL read |
|---|
| response path | Info.LoadTemplateFromURL -> template body |
|---|
| encoding | yaml |
|---|
| params | {"ProductId": "\u003cproduct-id\u003e", "ProvisioningArtifactId": "\u003cartifact-id\u003e", "Verbose": true} |
|---|
Required permissions
servicecatalog:DescribeProvisioningArtifact
References