gcp-loadbalancing-url-map-header-values

URL-map header actions can persist literal Authorization, API-key, cookie, or other sensitive header values.

gcpcritical service: gcp:loadbalancing emits ContainsCredential

Where it sits

locationcompute.urlMaps.get.headerAction.{requestHeadersToAdd[],responseHeadersToAdd[]}.headerValue
location kindconfig_field
data kindscredential api_key oauth_token sensitive_data
emits edgeContainsCredential
serviceCloud Load Balancing (gcp:loadbalancing)

Collection recipe

access moderead_api
operationcompute.urlMaps.get
response pathheaderAction.{requestHeadersToAdd[],responseHeadersToAdd[]}.headerValue
encodinglist
params{"project": "\u003cproject\u003e", "urlMap": "\u003curl-map\u003e"}

Required permissions

compute.urlMaps.get

References

move · open · esc close