aws-ssm-params-parameter-value-history
Old parameter versions remain readable through history and may expose rotated credentials.
Where it sits
| location | GetParameterHistory.Parameters[].Value |
|---|
| location kind | secret_value |
|---|
| data kinds | credential password api_key access_key secret_key connection_string sensitive_data |
|---|
| emits edge | CanReadSecret |
|---|
| service | SSM Parameter Store (aws:ssm-params) |
|---|
Collection recipe
| access mode | read_api |
|---|
| operation | GetParameterHistory |
|---|
| response path | Parameters[].Value |
|---|
| encoding | list |
|---|
| params | {"Name": "\u003cparameter-name\u003e", "WithDecryption": true} |
|---|
Required permissions
ssm:GetParameterHistory
References