gcp-cloudsql-external-replication-secrets-input

External-primary and replica configuration requests can carry replication passwords and PEM client private keys.

gcpcritical service: gcp:cloudsql emits ContainsCredential

Where it sits

locationsql.instances.insert/sql.instances.patch.request.{onPremisesConfiguration,replicaConfiguration.mysqlReplicaConfiguration}.{password,clientKey}
location kindsecret_value
data kindspassword private_key database_credential credential
emits edgeContainsCredential
serviceCloud SQL (gcp:cloudsql)

Collection recipe

access modewrite_only_input
operationsql.instances.insert/sql.instances.patch
response pathrequest.{onPremisesConfiguration,replicaConfiguration.mysqlReplicaConfiguration}.{password,clientKey}
encodingjson
params{"name": "\u003cresource-name\u003e"}

Required permissions

cloudsql.instances.create
cloudsql.instances.get
cloudsql.instances.update

References

move · open · esc close