aws-ssm-params-parameter-tags-value-config
Parameter tags remain plaintext regardless of SecureString encryption.
Where it sits
| location | ListTagsForResource.TagList[].Value |
|---|
| location kind | tag |
|---|
| data kinds | credential sensitive_data |
|---|
| emits edge | ContainsSecret |
|---|
| service | SSM Parameter Store (aws:ssm-params) |
|---|
Collection recipe
| access mode | read_api |
|---|
| operation | ListTagsForResource |
|---|
| response path | TagList[].Value |
|---|
| encoding | string |
|---|
| params | {"ResourceId": "\u003cparameter-name\u003e", "ResourceType": "Parameter"} |
|---|
Required permissions
ssm:ListTagsForResource
References