Exposure DB

cloudscheduler.projects.locations.jobs.get.pubsubTarget.{data,attributes.<value>} - leaks credential, api_key, oauth_token, customer_data, sensitive_data

sql.sslCerts.insert.clientCert.certPrivateKey - leaks private_key, database_credential, credential

sql.instances.get.settings.databaseFlags[].value - leaks credential, password, api_key, oauth_token, private_key, connection_string, sensitive_data

SQL SELECT.result rows - leaks database_credential, credential, customer_data, pii, sensitive_data

sql.users.insert/sql.users.update.request.password - leaks password, database_credential

sql.instances.demoteMaster.request.demoteMasterContext.replicaConfiguration.mysqlReplicaConfiguration.{password,clientKey} - leaks password, private_key, database_credential, credential

sql.connect.generateEphemeralCert/sql.sslCerts.createEphemeral.request.access_token - leaks oauth_token, bearer_token, credential

sql.instances.insert/sql.instances.patch.request.{onPremisesConfiguration,replicaConfiguration.mysqlReplicaConfiguration}.{password,clientKey} - leaks password, private_key, database_credential, credential

sql.instances.insert.request.rootPassword - leaks password, database_credential, credential

sql.instances.get.settings.userLabels.<value> - leaks credential, api_key, sensitive_data, pii

composer.projects.locations.environments.get.config.softwareConfig.airflowConfigOverrides.<value> - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string

Apache Airflow REST API / metadata database.Connection passwords/extras and Variable values - leaks credential, password, api_key, connection_string, sensitive_data

composer.projects.locations.environments.get.config.dagGcsPrefix/storageConfig.bucket -> DAG, plugin, data, and log object bytes - leaks source_code_secret, credential, password, api_key, private_key, customer_data

composer.projects.locations.environments.get.labels.<value> - leaks credential, api_key, sensitive_data, pii

composer.projects.locations.environments.get.config.softwareConfig.envVariables.<value> - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string

composer.projects.locations.environments.userWorkloadsSecrets.get.data.<value> - leaks credential, password, api_key, private_key, sensitive_data

dataflow.projects.locations.jobs.get.environment.{sdkPipelineOptions,workerPools[].metadata.<value>,userAgent,version} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data

dataflow.projects.locations.jobs.get.labels.<value> - leaks credential, api_key, sensitive_data, pii

dataflow.projects.locations.jobs.messages.list.jobMessages[].messageText - leaks credential, password, api_key, oauth_token, private_key, connection_string, sensitive_data

dataflow.projects.locations.jobs.get.steps[].properties - leaks source_code_secret, credential, password, api_key, private_key, connection_string

dataproc.projects.regions.clusters.get.labels.<value> - leaks credential, api_key, sensitive_data, pii

dataproc.projects.regions.clusters.get.config.{gceClusterConfig.metadata.<value>,softwareConfig.properties.<value>} - leaks credential, password, api_key, access_key, secret_key, oauth_token, source_code_secret, connection_string

dataproc.projects.regions.clusters.get.config.initializationActions[].executableFile -> Cloud Storage object bytes - leaks source_code_secret, credential, password, api_key, private_key

dataproc.projects.regions.jobs.get.{hadoopJob,sparkJob,pysparkJob,sparkSqlJob,prestoJob,trinoJob}.args[]/properties.<value> - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data

dataproc.projects.regions.jobs.get.driverOutputResourceUri -> Cloud Storage object bytes - leaks credential, password, api_key, oauth_token, private_key, connection_string, sensitive_data

dataproc.projects.regions.workflowTemplates.get.jobs[].{hadoopJob,sparkJob,pysparkJob,sparkSqlJob,prestoJob,trinoJob} - leaks source_code_secret, credential, password, api_key, private_key, connection_string

datastream.projects.locations.connectionProfiles.create/datastream.projects.locations.connectionProfiles.patch.request.{mysqlProfile.password,postgresqlProfile.password,oracleProfile.password,oracleProfile.oracleAsmConfig.password,sqlServerProfile.password,mongodbProfile.password} - leaks password, database_credential, credential

datastream.projects.locations.connectionProfiles.create/datastream.projects.locations.connectionProfiles.patch.request.{mysqlProfile.sslConfig.clientKey,postgresqlProfile.sslConfig.serverAndClientVerification.clientKey,mongodbProfile.sslConfig.clientKey} - leaks private_key, database_credential, credential

datastream.projects.locations.connectionProfiles.get.{mysqlProfile,postgresqlProfile,oracleProfile,sqlServerProfile,mongodbProfile}.{hostname,username,database} - leaks database_credential, pii, sensitive_data

Cloud Data Fusion REST API.pipeline configuration JSON: properties and plugin configuration - leaks source_code_secret, credential, password, api_key, private_key, connection_string

datastream.projects.locations.connectionProfiles.create/datastream.projects.locations.connectionProfiles.patch.request.forwardSshConnectivity.{password,privateKey} - leaks password, private_key, credential

datastream.projects.locations.connectionProfiles.create/datastream.projects.locations.connectionProfiles.patch.request.{salesforceProfile.oauth2ClientCredentials.clientSecret,salesforceMarketingCloudProfile.oauthClientCredentials.clientSecret.rawValue,serviceNowProfile.oauthClientCredentials.clientSecret.rawValue,dataverseProfile.oauthClientCredentials.clientSecret.rawValue,workdayProfile.oauthRefreshTokenCredentials.oauthClientCredentials.clientSecret.rawValue} - leaks oauth_token, secret_key, credential

datastream.projects.locations.connectionProfiles.create/datastream.projects.locations.connectionProfiles.patch.request.salesforceProfile.userCredentials.{password,securityToken} - leaks password, oauth_token, credential

datastream.projects.locations.connectionProfiles.create/datastream.projects.locations.connectionProfiles.patch.request.serviceNowProfile.userPasswordCredentials.password - leaks password, credential

datastream.projects.locations.streams.get.errors[].{message,details} - leaks credential, password, api_key, oauth_token, private_key, connection_string, sensitive_data

datastream.projects.locations.streams.get.labels.<value> - leaks credential, api_key, sensitive_data, pii

datastream.projects.locations.connectionProfiles.create/datastream.projects.locations.connectionProfiles.patch.request.workdayProfile.oauthRefreshTokenCredentials.refreshToken.rawValue - leaks oauth_token, bearer_token, credential

deploymentmanager.deployments.get.{description,labels[].value} - leaks credential, api_key, sensitive_data, pii

deploymentmanager.manifests.get.{config.content,expandedConfig,layout} - leaks source_code_secret, credential, password, api_key, private_key, connection_string

deploymentmanager.manifests.get.imports[].content - leaks source_code_secret, credential, password, api_key, private_key

deploymentmanager.operations.get.error.errors[].message - leaks credential, password, api_key, oauth_token, private_key, connection_string, sensitive_data

eventarc.projects.locations.channels.get.activationToken - leaks credential, bearer_token

eventarc.projects.locations.channelConnections.create.request.activationToken - leaks credential, bearer_token

eventarc.projects.locations.triggers.get.destination - leaks sensitive_data

eventarc.projects.locations.triggers.get.{eventFilters.<value>,labels.<value>} - leaks credential, api_key, sensitive_data, pii

file.projects.locations.instances.get.{description,labels.<value>} - leaks credential, api_key, sensitive_data, pii

NFS READ.exported file bytes - leaks credential, private_key, source_code_secret, customer_data, pii

firestore.projects.databases.documents.get.fields.<value> - leaks credential, customer_data, pii, sensitive_data

firestore.projects.databases.documents.get.name - leaks pii, sensitive_data

firestore.projects.databases.documents.runQuery.[].document.fields.<value> - leaks credential, customer_data, pii, sensitive_data