aws-vpc-vpc-endpoint-policy-config
VPC endpoint policy JSON can contain sensitive principal, source, tag, or condition values.
Where it sits
| location | DescribeVpcEndpoints.VpcEndpoints[].PolicyDocument |
|---|
| location kind | policy_document |
|---|
| data kinds | credential sensitive_data |
|---|
| emits edge | ContainsSecret |
|---|
| service | VPC (aws:vpc) |
|---|
Collection recipe
| access mode | read_api |
|---|
| operation | DescribeVpcEndpoints |
|---|
| response path | VpcEndpoints[].PolicyDocument |
|---|
| encoding | json |
|---|
| params | {"VpcEndpointIds": ["\u003cendpoint-id\u003e"]} |
|---|
Required permissions
ec2:DescribeVpcEndpoints
References