Loading controls...
Control: CodeBuild project plaintext environment variables should not contain sensitive AWS values
Description
Ensure authentication credentials AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY do not exist within AWS CodeBuild project environments. Do not store these variables in clear text. Storing these variables in clear text leads to unintended data exposure and unauthorized access.
Usage
Run the control in your terminal:
steampipe check terraform_aws_compliance.control.codebuild_project_plaintext_env_variables_no_sensitive_aws_valuesSnapshot and share results via Steampipe Cloud:
steampipe loginsteampipe check --share terraform_aws_compliance.control.codebuild_project_plaintext_env_variables_no_sensitive_aws_valuesSQL
This control uses a named query:
codebuild_project_plaintext_env_variables_no_sensitive_aws_values