Edge types
Filtered:
category data
- 7 of 80.
Clear
Destructive impact; not escalation.
data
Can move data out of boundary (share snapshot cross-account, presign URL, replicate).
data
walkable
Effective data-plane read (control-plane perm + network reach + decrypt if encrypted). Includes reading messages from a queue/topic/stream.
data
walkable
high value
Effective data-plane write (can poison code/artifacts/config → onward execution). Includes publishing/sending to a queue/topic/event bus.
data
walkable
Resource stores a usable credential. Includes hardcoded credentials in workflow definitions, SAS keys in message connectors, and API keys in event subscriptions.
data
walkable
Recon: resource references another (connection targets, IaC). Aids collection, not traversal. Network sources (e.g., Route 53 DNS zones) reference alias targets like ELB/CloudFront/S3; dangling aliases are a legitimate structural relationship.
data
Resource stores secret material (drives ExposesCredential).
data
walkable