gcp-cloudsql-initial-root-password-input

A Cloud SQL instance creation request can carry the initial root password as plaintext input.

gcpcritical service: gcp:cloudsql emits ContainsCredential

Where it sits

locationsql.instances.insert.request.rootPassword
location kindsecret_value
data kindspassword database_credential credential
emits edgeContainsCredential
serviceCloud SQL (gcp:cloudsql)

Collection recipe

access modewrite_only_input
operationsql.instances.insert
response pathrequest.rootPassword
encodingstring
params{"name": "\u003cresource-name\u003e"}

Required permissions

cloudsql.instances.create

References

move · open · esc close