gcp-clouddns-record-set-data

DNS record data, especially TXT records, can expose verification tokens, service endpoints, and mistakenly stored secrets.

gcphigh service: gcp:clouddns emits ContainsCredential

Where it sits

locationdns.resourceRecordSets.list.rrsets[].rrdatas[]
location kindconfig_field
data kindscredential api_key sensitive_data pii
emits edgeContainsCredential
serviceCloud DNS (gcp:clouddns)

Collection recipe

access moderead_api
operationdns.resourceRecordSets.list
response pathrrsets[].rrdatas[]
encodinglist
params{"managedZone": "\u003czone\u003e", "project": "\u003cproject\u003e"}

Required permissions

dns.resourceRecordSets.list

References

move · open · esc close