aws-sns-subscription-endpoint-config
HTTP(S), email, SMS, and application subscription endpoints can expose PII or URLs containing embedded authentication material.
Where it sits
| location | ListSubscriptionsByTopic.Subscriptions[].Endpoint |
|---|
| location kind | connection_string |
|---|
| data kinds | credential api_key webhook_secret sensitive_data pii |
|---|
| emits edge | ContainsCredential |
|---|
| service | SNS (aws:sns) |
|---|
Collection recipe
| access mode | read_api |
|---|
| operation | ListSubscriptionsByTopic |
|---|
| response path | Subscriptions[].Endpoint |
|---|
| encoding | string |
|---|
| params | {"TopicArn": "\u003ctopic-arn\u003e"} |
|---|
Required permissions
sns:ListSubscriptionsByTopic
References