TF 0502 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki

Secrets should not be exfiltrated using Terraform HTTP data blocks

Property Value
Language terraform
Severity critical
Service ssm
Provider AWS

Description

The data.http block can be used to send secret data outside of the organisation.

Resolution

Remove this potential exfiltration HTTP request.