gcp-gce-instance-metadata-values

Instance metadata values may contain startup scripts, SSH keys, passwords, API keys, or arbitrary application configuration.

gcpcritical service: gcp:gce emits ContainsCredential

Where it sits

locationcompute.instances.get.metadata.items[].value
location kindmetadata
data kindscredential password api_key access_key secret_key oauth_token source_code_secret
emits edgeContainsCredential
serviceCompute Engine (gcp:gce)

Collection recipe

access moderead_api
operationcompute.instances.get
response pathmetadata.items[].value
encodinglist
params{"instance": "\u003cinstance-name\u003e", "project": "\u003cproject-id\u003e", "zone": "\u003czone\u003e"}

Required permissions

compute.instances.get

References

move · open · esc close