Exposure DB

CreateCluster.MasterUserPassword / ModifyCluster.MasterUserPassword - leaks password, database_credential, credential

ListResourceRecordSets.ResourceRecordSets[].ResourceRecords[].Value - leaks credential, api_key, certificate, sensitive_data

CloudWatch Logs SageMaker training/processing/inference log event.message - leaks credential, password, api_key, customer_data, pii, source_code_secret

DescribeModel.PrimaryContainer.Environment / Containers[].Environment - leaks credential, password, api_key, access_key, secret_key, connection_string

DescribeNotebookInstanceLifecycleConfig.NotebookInstanceLifecycleConfig.OnCreate[].Content / OnStart[].Content - leaks credential, password, api_key, access_key, secret_key, private_key, connection_string, source_code_secret

DescribePipeline.PipelineDefinition - leaks credential, password, api_key, connection_string, source_code_secret

DescribeProcessingJob.Environment - leaks credential, password, api_key, access_key, secret_key, connection_string

DescribeStudioLifecycleConfig.StudioLifecycleConfigContent - leaks credential, password, api_key, access_key, secret_key, private_key, connection_string

DescribeTrainingJob.Environment / HyperParameters - leaks credential, password, api_key, access_key, secret_key, connection_string, sensitive_data

DescribeTransformJob.Environment - leaks credential, password, api_key, access_key, secret_key, connection_string

DescribeProvisioningArtifact.Info.LoadTemplateFromURL -> CloudFormation template - leaks credential, password, api_key, access_key, secret_key, connection_string, source_code_secret

Publish request.Message / MessageAttributes - leaks credential, password, api_key, bearer_token, session_token, customer_data, pii

ListSubscriptionsByTopic.Subscriptions[].Endpoint - leaks credential, api_key, webhook_secret, sensitive_data, pii

DescribeAssociation.AssociationDescription.Parameters - leaks credential, password, api_key, connection_string

GetAutomationExecution.AutomationExecution.Parameters / Outputs - leaks credential, password, api_key, connection_string, sensitive_data

GetCommandInvocation.StandardOutputContent / StandardErrorContent - leaks credential, password, api_key, access_key, secret_key, private_key, sensitive_data

ListCommands.Commands[].Parameters - leaks credential, password, api_key, access_key, secret_key, connection_string

GetDocument.Content - leaks credential, password, api_key, access_key, secret_key, private_key, connection_string, source_code_secret

GetMaintenanceWindowTask.TaskInvocationParameters - leaks credential, password, api_key, connection_string

CloudWatch Logs/S3 Session Manager transcript - leaks credential, password, api_key, access_key, secret_key, private_key, sensitive_data

DescribeStateMachine.definition - leaks credential, password, api_key, access_key, secret_key, connection_string, source_code_secret

AssumeRole request.ExternalId - leaks credential, sensitive_data

GetWebACL.WebACL.Rules[].Action.{Allow,Captcha,Challenge}.CustomRequestHandling.InsertHeaders[].Value / WebACL.Rules[].Action.Block.CustomResponse.ResponseHeaders[].Value / WebACL.DefaultAction.Allow.CustomRequestHandling.InsertHeaders[].Value / WebACL.DefaultAction.Block.CustomResponse.ResponseHeaders[].Value - leaks credential, api_key, bearer_token, sensitive_data

Kinesis Firehose/S3/CloudWatch WAF log record - leaks credential, password, api_key, bearer_token, session_token, pii, sensitive_data

appengine.apps.create/appengine.apps.patch.request.iap.oauth2ClientSecret - leaks oauth_token, secret_key, credential

appengine.apps.authorizedCertificates.create/appengine.apps.authorizedCertificates.patch.request.certificateRawData.privateKey - leaks private_key, credential

appengine.apps.services.versions.get.deployment.files.<value>.sourceUrl -> Cloud Storage object bytes - leaks source_code_secret, credential, password, api_key, private_key

appengine.apps.services.versions.get.envVariables.<value> - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string

batch.projects.locations.jobs.get.taskGroups[].taskSpec.runnables[].container.{commands[],options} - leaks credential, password, api_key, access_key, secret_key, oauth_token, sensitive_data

batch.projects.locations.jobs.get.taskGroups[].taskSpec.runnables[].script.text - leaks source_code_secret, credential, password, api_key, private_key

batch.projects.locations.jobs.get.taskGroups[].{taskSpec.environment.variables.<value>,taskSpec.environments.<value>,taskEnvironments[].variables.<value>} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string

bigquery.routines.get.definitionBody - leaks source_code_secret, credential, password, api_key, private_key, sensitive_data

certificatemanager.projects.locations.dnsAuthorizations.get.dnsResourceRecord.{name,type,data} - leaks credential, sensitive_data

certificatemanager.projects.locations.certificates.create/certificatemanager.projects.locations.certificates.patch.request.selfManaged.pemPrivateKey - leaks private_key, credential

compute.securityPolicies.get.rules[].headerAction.requestHeadersToAdds[].headerValue - leaks credential, api_key, oauth_token, sensitive_data

cloudbuild.projects.builds.get.steps[].args[] - leaks credential, password, api_key, access_key, secret_key, oauth_token, sensitive_data

cloudbuild.projects.builds.get.steps[].env[] - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string

cloudbuild.projects.builds.get.substitutions.<value> - leaks credential, password, api_key, access_key, secret_key, oauth_token, sensitive_data

cloudbuild.projects.triggers.get.build.{steps[],substitutions,options.env[]} - leaks source_code_secret, credential, password, api_key, private_key

clouddeploy.projects.locations.customTargetTypes.get.customActions.{renderAction,deployAction} - leaks source_code_secret, credential, password, api_key, private_key

clouddeploy.projects.locations.customTargetTypes.get.tasks.{render,deploy}.container.{env.<value>,command[],args[]} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data

clouddeploy.projects.locations.deliveryPipelines.releases.get.buildArtifacts[].{image,skaffoldConfigUri,manifestPath} - leaks source_code_secret, credential, password, api_key, private_key

dns.resourceRecordSets.list.rrsets[].rrdatas[] - leaks credential, api_key, sensitive_data, pii

cloudidentity.inboundOidcSsoProfiles.create/cloudidentity.inboundOidcSsoProfiles.patch.request.rpConfig.clientSecret - leaks oauth_token, secret_key, credential

run.projects.locations.services.get.buildConfig.environmentVariables.<value> - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string

run.projects.locations.jobs.get.template.template.containers[].env[].value - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string

run.projects.locations.services.get.template.containers[].env[].value - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string

run.projects.locations.workerPools.get.template.containers[].env[].value - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string

cloudscheduler.projects.locations.jobs.get.appEngineHttpTarget.{relativeUri,headers.<value>,body} - leaks credential, api_key, oauth_token, customer_data, sensitive_data

cloudscheduler.projects.locations.jobs.get.httpTarget.{uri,headers.<value>,body} - leaks credential, api_key, oauth_token, customer_data, sensitive_data