gcp-dataproc-job-arguments-properties

Dataproc job arguments and properties may persist database passwords, tokens, or signed URLs.

gcpcritical service: gcp:dataproc emits ContainsCredential

Where it sits

locationdataproc.projects.regions.jobs.get.{hadoopJob,sparkJob,pysparkJob,sparkSqlJob,prestoJob,trinoJob}.args[]/properties.<value>
location kindcommand_argument
data kindscredential password api_key access_key secret_key oauth_token connection_string sensitive_data
emits edgeContainsCredential
serviceDataproc (gcp:dataproc)

Collection recipe

access moderead_api
operationdataproc.projects.regions.jobs.get
response path{hadoopJob,sparkJob,pysparkJob,sparkSqlJob,prestoJob,trinoJob}.args[]/properties.<value>
encodingjson
params{"name": "\u003cresource-name\u003e"}

Required permissions

dataproc.jobs.get

References

move · open · esc close