gcp-cloudarmor-rule-description

Security-policy rule descriptions are plaintext customer-controlled metadata.

gcpmedium service: gcp:cloudarmor emits ContainsSecret

Where it sits

locationcompute.securityPolicies.get.rules[].description
location kindmetadata
data kindscredential api_key sensitive_data pii
emits edgeContainsSecret
serviceCloud Armor (gcp:cloudarmor)

Collection recipe

access moderead_api
operationcompute.securityPolicies.get
response pathrules[].description
encodinglist
params{"name": "\u003cresource-name\u003e"}

Required permissions

compute.securityPolicies.get

References

move · open · esc close