gcp-dataproc-initialization-actions
Initialization scripts can hard-code credentials or download sensitive configuration.
Where it sits
| location | dataproc.projects.regions.clusters.get.config.initializationActions[].executableFile -> Cloud Storage object bytes |
|---|
| location kind | bootstrap_script |
|---|
| data kinds | source_code_secret credential password api_key private_key |
|---|
| emits edge | ContainsCredential |
|---|
| service | Dataproc (gcp:dataproc) |
|---|
Collection recipe
| access mode | indirect_destination |
|---|
| operation | dataproc.projects.regions.clusters.get |
|---|
| response path | config.initializationActions[].executableFile -> Cloud Storage object bytes |
|---|
| encoding | binary |
|---|
| params | {"name": "\u003cresource-name\u003e"} |
|---|
Required permissions
dataproc.clusters.get
storage.objects.get
References