ContainsResourceReference
Recon: resource references another (connection targets, IaC). Aids collection, not traversal. Network sources (e.g., Route 53 DNS zones) reference alias targets like ELB/CloudFront/S3; dangling aliases are a legitimate structural relationship.
Data, Storage, Compute, Network
── ContainsResourceReference ──▸
*
Source types
DataStorageComputeNetworkTarget types
*States
ACTIVE
CONDITIONAL
POTENTIAL
BLOCKED
UNKNOWN
Derivation
| nature | explicit |
|---|
Rules that emit ContainsResourceReference 18
awsexplicit
awsexplicit
awsexplicit
awsexplicit
A Kubernetes pod/deployment references (pulls and runs) a container image from an ECR repository. Records the tag/digest for mutability assessment.
awsexplicit
S3 URI backing EMR Studio workspace (DefaultS3Location); used to detect notebook-injection attack surface.
awsexplicit
S3 URI where EMR cluster logs are written; record as a resource reference for data discovery.
awsexplicit
awsexplicit
azureexplicit
azureexplicit
azureexplicit
gcpexplicit
gcpexplicit
gcpexplicit
gcpexplicit
gcpexplicit
gcpexplicit
gcpexplicit