aws-sns-endpoint-custom-user-data

Platform endpoint CustomUserData is arbitrary plaintext and can contain user data or misplaced tokens.

awshigh service: aws:sns emits ContainsSecret

Where it sits

locationGetEndpointAttributes.Attributes.CustomUserData
location kindmetadata
data kindscredential sensitive_data pii
emits edgeContainsSecret
serviceSNS (aws:sns)

Collection recipe

access moderead_api
operationGetEndpointAttributes
response pathAttributes.CustomUserData
encodingstring
params{"EndpointArn": "\u003cendpoint-arn\u003e"}

Required permissions

sns:GetEndpointAttributes

References

move · open · esc close