gcp-loadbalancing-ssl-private-key-input

Global and regional legacy SSL certificate create requests can carry an unencrypted PEM private key.

gcpcritical service: gcp:loadbalancing emits ContainsCredential

Where it sits

locationcompute.sslCertificates.insert/compute.regionSslCertificates.insert.request.{privateKey,selfManaged.privateKey}
location kindsecret_value
data kindsprivate_key credential
emits edgeContainsCredential
serviceCloud Load Balancing (gcp:loadbalancing)

Collection recipe

access modewrite_only_input
operationcompute.sslCertificates.insert/compute.regionSslCertificates.insert
response pathrequest.{privateKey,selfManaged.privateKey}
encodingjson
params{"name": "\u003cresource-name\u003e"}

Required permissions

compute.sslCertificates.create
compute.regionSslCertificates.create

References

move · open · esc close