aws-stepfunctions-resource-tags-value-config

State machine and activity tag values are plaintext metadata.

awsmedium service: aws:stepfunctions emits ContainsSecret

Where it sits

locationListTagsForResource.tags[].value
location kindtag
data kindscredential sensitive_data
emits edgeContainsSecret
serviceStep Functions (aws:stepfunctions)

Collection recipe

access moderead_api
operationListTagsForResource
response pathtags[].value
encodingstring
params{"resourceArn": "\u003cresource-arn\u003e"}

Required permissions

states:ListTagsForResource

References

move · open · esc close