aws-sso-resource-tags-value-config

IAM Identity Center resource tag values are plaintext metadata.

awsmedium service: aws:sso emits ContainsSecret

Where it sits

locationsso-admin:ListTagsForResource.Tags[].Value
location kindtag
data kindscredential sensitive_data
emits edgeContainsSecret
serviceIAM Identity Center (aws:sso)

Collection recipe

access moderead_api
operationListTagsForResource
response pathTags[].Value
encodingstring
params{"InstanceArn": "\u003cinstance-arn\u003e", "ResourceArn": "\u003cresource-arn\u003e"}

Required permissions

sso:ListTagsForResource

References

move · open · esc close