gcp-gce-project-common-metadata-values

Project-wide instance metadata is inherited by VMs and may expose shared bootstrap secrets or SSH keys.

gcpcritical service: gcp:gce emits ContainsCredential

Where it sits

locationcompute.projects.get.commonInstanceMetadata.items[].value
location kindmetadata
data kindscredential password api_key access_key secret_key oauth_token source_code_secret
emits edgeContainsCredential
serviceCompute Engine (gcp:gce)

Collection recipe

access moderead_api
operationcompute.projects.get
response pathcommonInstanceMetadata.items[].value
encodinglist
params{"project": "\u003cproject-id\u003e"}

Required permissions

compute.projects.get

References

move · open · esc close