gcp-pd-disk-filesystem-content
Attaching a disk read-only or restoring/exporting a snapshot exposes every plaintext secret stored in its filesystem.
Where it sits
| location | Compute Engine disk attachment or snapshot export.mounted filesystem bytes |
|---|
| location kind | data_record |
|---|
| data kinds | credential private_key source_code_secret customer_data pii |
|---|
| emits edge | CanReadData |
|---|
| service | Persistent Disk / Snapshots (gcp:pd) |
|---|
Collection recipe
| access mode | data_plane |
|---|
| operation | Compute Engine disk attachment or snapshot export |
|---|
| response path | mounted filesystem bytes |
|---|
| encoding | binary |
|---|
| params | {"name": "\u003cresource-name\u003e"} |
|---|
Required permissions
compute.disks.useReadOnly
compute.instances.attachDisk
References