gcp-cloudsql-database-user-password-input
Database user create and update requests carry the plaintext password and must not be logged.
Where it sits
| location | sql.users.insert/sql.users.update.request.password |
|---|
| location kind | secret_value |
|---|
| data kinds | password database_credential |
|---|
| emits edge | ContainsCredential |
|---|
| service | Cloud SQL (gcp:cloudsql) |
|---|
Collection recipe
| access mode | write_only_input |
|---|
| operation | sql.users.insert/sql.users.update |
|---|
| response path | request.password |
|---|
| encoding | string |
|---|
| params | {"name": "\u003cresource-name\u003e"} |
|---|
Required permissions
cloudsql.users.create
cloudsql.users.update
References