gcp-secretmanager-secret-version-add-input

The add-version request carries the secret payload and must never be logged by clients or intermediaries.

gcpcritical service: gcp:secretmanager emits ContainsSecret

Where it sits

locationsecretmanager.projects.secrets.addVersion.request.payload.data
location kindsecret_value
data kindscredential password api_key private_key sensitive_data
emits edgeContainsSecret
serviceSecret Manager (gcp:secretmanager)

Collection recipe

access modewrite_only_input
operationsecretmanager.projects.secrets.addVersion
response pathrequest.payload.data
encodingbase64
params{"name": "\u003cresource-name\u003e"}

Required permissions

secretmanager.versions.add

References

move · open · esc close