aws-sts-external-id-request-parameter
ExternalId is a customer-supplied trust nonce and can be exposed in callers, traces, or request logging even though AWS does not treat it as a password.
Where it sits
| location | AssumeRole request.ExternalId |
|---|
| location kind | config_field |
|---|
| data kinds | credential sensitive_data |
|---|
| emits edge | ContainsCredential |
|---|
| service | STS (aws:sts) |
|---|
Collection recipe
| access mode | creation_response_only |
|---|
| operation | AssumeRole |
|---|
| response path | request.ExternalId |
|---|
| encoding | string |
|---|
| params | {"ExternalId": "\u003cexternal-id\u003e", "RoleArn": "\u003crole-arn\u003e"} |
|---|
Required permissions
References