gcp-firestore-document-fields

Firestore document fields may contain credentials, tokens, PII, or arbitrary customer data.

gcpcritical service: gcp:firestore emits CanReadData

Where it sits

locationfirestore.projects.databases.documents.get.fields.<value>
location kinddata_record
data kindscredential customer_data pii sensitive_data
emits edgeCanReadData
serviceFirestore / Datastore (gcp:firestore)

Collection recipe

access moderead_api
operationfirestore.projects.databases.documents.get
response pathfields.<value>
encodingmap
params{"name": "\u003cresource-name\u003e"}

Required permissions

datastore.entities.get

References

move · open · esc close