aws-timestream-scheduled-query-string-config

Scheduled-query SQL is stored plaintext and may contain literal credentials or sensitive filter values.

awshigh service: aws:timestream emits ContainsSecret

Where it sits

locationDescribeScheduledQuery.ScheduledQuery.QueryString
location kindquery_text
data kindscredential password api_key sensitive_data
emits edgeContainsSecret
serviceTimestream (aws:timestream)

Collection recipe

access moderead_api
operationDescribeScheduledQuery
response pathScheduledQuery.QueryString
encodingstring
params{"ScheduledQueryArn": "\u003cscheduled-query-arn\u003e"}

Required permissions

timestream:DescribeScheduledQuery

References

move · open · esc close