gcp-loadbalancing-backend-custom-headers

Backend custom headers may contain literal credentials or sensitive routing values.

gcpcritical service: gcp:loadbalancing emits ContainsCredential

Where it sits

locationcompute.backendServices.get.{customRequestHeaders[],customResponseHeaders[]}
location kindconfig_field
data kindscredential api_key oauth_token sensitive_data
emits edgeContainsCredential
serviceCloud Load Balancing (gcp:loadbalancing)

Collection recipe

access moderead_api
operationcompute.backendServices.get
response path{customRequestHeaders[],customResponseHeaders[]}
encodingjson
params{"backendService": "\u003cbackend\u003e", "project": "\u003cproject\u003e"}

Required permissions

compute.backendServices.get

References

move · open · esc close