rage.fail

aws-mq-credential-secret-basic-auth

explicit aws emits CredentialsFor

match (record)

{ "field": "SourceAccessConfigurations", "resource_type": "AWS::Lambda::EventSourceMapping", "subfield_match": { "Type": "BASIC_AUTH" } }

emit

source type	`Secret`
target type	`Identity`
source	`<Secrets Manager Secret node from BASIC_AUTH URI>`
target	`<broker user ServiceIdentity node>`

Narrative

{secret.name} holds the wire-protocol credentials (CredentialsFor) for broker user on {broker.name}.

Raw rule rules/explicit/aws-mq.yaml

id: aws-mq-credential-secret-basic-auth
emits: CredentialsFor
applies_to:
- aws
match_record:
  resource_type: AWS::Lambda::EventSourceMapping
  field: SourceAccessConfigurations
  subfield_match:
    Type: BASIC_AUTH
emit:
  source_type: Secret
  target_type: Identity
  source: <Secrets Manager Secret node from BASIC_AUTH URI>
  target: <broker user ServiceIdentity node>
  api_source: lambda:GetEventSourceMapping
  narrative: '{secret.name} holds the wire-protocol credentials (CredentialsFor) for broker user on {broker.name}.'