turbot/aws_compliance
Loading controls...

Control: CodeBuild project plaintext environment variables should not contain sensitive AWS values

Description

Ensure authentication credentials AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY do not exist within AWS CodeBuild project environments. Do not store these variables in clear text. Storing these variables in clear text leads to unintended data exposure and unauthorized access.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.codebuild_project_plaintext_env_variables_no_sensitive_aws_values

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.codebuild_project_plaintext_env_variables_no_sensitive_aws_values --share

SQL

This control uses a named query:

codebuild_project_plaintext_env_variables_no_sensitive_aws_values

Tags