gcp-tasks-app-engine-request-body-headers

With FULL view, App Engine task bodies, headers, and URIs may expose credentials or sensitive data.

gcpcritical service: gcp:tasks emits CanReadData

Where it sits

locationcloudtasks.projects.locations.queues.tasks.get.appEngineHttpRequest.{body,headers.<value>,relativeUri}
location kindpayload
data kindscredential customer_data pii sensitive_data
emits edgeCanReadData
serviceCloud Tasks (gcp:tasks)

Collection recipe

access moderead_api
operationcloudtasks.projects.locations.queues.tasks.get
response pathappEngineHttpRequest.{body,headers.<value>,relativeUri}
encodingjson
params{"name": "\u003ctask-name\u003e", "responseView": "FULL"}

Required permissions

cloudtasks.tasks.get
cloudtasks.tasks.fullView

References

move · open · esc close