aws-ssm-params-parameter-value-current

String, StringList, and decrypted SecureString parameter values may contain arbitrary plaintext credentials.

awscritical service: aws:ssm-params emits CanReadSecret

Where it sits

locationGetParameter.Parameter.Value
location kindsecret_value
data kindscredential password api_key access_key secret_key oauth_token connection_string sensitive_data
emits edgeCanReadSecret
serviceSSM Parameter Store (aws:ssm-params)

Collection recipe

access moderead_api
operationGetParameter
response pathParameter.Value
encodingstring
params{"Name": "\u003cparameter-name\u003e", "WithDecryption": true}

Required permissions

ssm:GetParameter

References

move · open · esc close