gcp-spanner-sql-query-result-rows

Spanner SQL result rows may return credentials or sensitive application records.

gcpcritical service: gcp:spanner emits CanReadData

Where it sits

locationspanner.projects.instances.databases.sessions.executeSql.rows[]
location kinddata_record
data kindscredential customer_data pii sensitive_data
emits edgeCanReadData
serviceCloud Spanner (gcp:spanner)

Collection recipe

access moderead_api
operationspanner.projects.instances.databases.sessions.executeSql
response pathrows[]
encodinglist
params{"name": "\u003cresource-name\u003e"}

Required permissions

spanner.sessions.create
spanner.databases.select

References

move · open · esc close