TF 0502 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki
Secrets should not be exfiltrated using Terraform HTTP data blocks
Property | Value |
---|---|
Language | |
Severity | |
Service | ssm |
Provider | AWS |
Description
The data.http block can be used to send secret data outside of the organisation.
Resolution
Remove this potential exfiltration HTTP request.