gcp-vertexai-generation-tool-credentials-input

Inference tool configuration can transmit literal third-party API keys, OAuth access tokens, or OIDC ID tokens.

gcpcritical service: gcp:vertexai emits ContainsCredential

Where it sits

locationaiplatform.projects.locations.publishers.models.generateContent.request.tools[].{exaAiSearch.apiKey,parallelAiSearch.apiKey,retrieval.externalApi.apiAuth.apiKeyConfig.apiKeyString,retrieval.externalApi.authConfig.apiKeyConfig.apiKeyString,retrieval.externalApi.authConfig.oauthConfig.accessToken,retrieval.externalApi.authConfig.oidcConfig.idToken}
location kindsecret_value
data kindsapi_key oauth_token bearer_token credential
emits edgeContainsCredential
serviceVertex AI / Workbench (gcp:vertexai)

Collection recipe

access modewrite_only_input
operationaiplatform.projects.locations.publishers.models.generateContent
response pathrequest.tools[].{exaAiSearch.apiKey,parallelAiSearch.apiKey,retrieval.externalApi.apiAuth.apiKeyConfig.apiKeyString,retrieval.externalApi.authConfig.apiKeyConfig.apiKeyString,retrieval.externalApi.authConfig.oauthConfig.accessToken,retrieval.externalApi.authConfig.oidcConfig.idToken}
encodingjson
params{"name": "\u003cresource-name\u003e"}

Required permissions

aiplatform.endpoints.predict

References

move · open · esc close