gcp-cloudsql-client-certificate-private-key-output

Cloud SQL returns the newly generated client-certificate private key only in the insert response.

gcpcritical service: gcp:cloudsql emits ExposesCredential

Where it sits

locationsql.sslCerts.insert.clientCert.certPrivateKey
location kindoutput_value
data kindsprivate_key database_credential credential
emits edgeExposesCredential
serviceCloud SQL (gcp:cloudsql)

Collection recipe

access modecreation_response_only
operationsql.sslCerts.insert
response pathclientCert.certPrivateKey
encodingstring
params{"name": "\u003cresource-name\u003e"}

Required permissions

cloudsql.sslCerts.create

References

move · open · esc close