aws-sso-group-description-config
Identity Store group descriptions are free-form plaintext and can carry accidental secrets.
Where it sits
| location | identitystore:DescribeGroup.Description |
|---|
| location kind | config_field |
|---|
| data kinds | credential sensitive_data |
|---|
| emits edge | ContainsSecret |
|---|
| service | IAM Identity Center (aws:sso) |
|---|
Collection recipe
| access mode | read_api |
|---|
| operation | DescribeGroup |
|---|
| response path | Description |
|---|
| encoding | string |
|---|
| params | {"GroupId": "\u003cgroup-id\u003e", "IdentityStoreId": "\u003cidentity-store-id\u003e"} |
|---|
Required permissions
identitystore:DescribeGroup
References