aws-waf-byte-match-search-string
Byte-match search strings are base64-encoded customer content and can accidentally contain real credentials used to identify traffic.
Where it sits
| location | GetWebACL.WebACL.Rules[].Statement.*.ByteMatchStatement.SearchString |
|---|
| location kind | config_field |
|---|
| data kinds | credential password api_key bearer_token sensitive_data |
|---|
| emits edge | ContainsSecret |
|---|
| service | WAF/Shield (aws:waf) |
|---|
Collection recipe
| access mode | read_api |
|---|
| operation | GetWebACL |
|---|
| response path | WebACL.Rules[].Statement.*.ByteMatchStatement.SearchString |
|---|
| encoding | base64 |
|---|
| params | {"Id": "\u003cweb-acl-id\u003e", "Name": "\u003cweb-acl-name\u003e", "Scope": "\u003cREGIONAL|CLOUDFRONT\u003e"} |
|---|
Required permissions
References