aws-sso-user-profile-attributes
Identity Store user attributes are customer-controlled and may contain sensitive identity data or misplaced secrets.
Where it sits
| location | identitystore:DescribeUser.{UserName,DisplayName,Emails[],PhoneNumbers[],Addresses[]} |
|---|---|
| location kind | metadata |
| data kinds | pii sensitive_data credential |
| emits edge | ContainsSecret |
| service | IAM Identity Center (aws:sso) |
Collection recipe
| access mode | read_api |
|---|---|
| operation | DescribeUser |
| response path | {UserName,DisplayName,Emails[],PhoneNumbers[],Addresses[]} |
| encoding | json |
| params | {"IdentityStoreId": "\u003cidentity-store-id\u003e", "UserId": "\u003cuser-id\u003e"} |
Required permissions
identitystore:DescribeUser