Aqua CSPM
AWS › CloudFormation ›

CloudFormation Plaintext Parameters

Quick Info

Plugin TitleCloudFormation Plaintext Parameters
CloudAWS
CategoryCloudFormation
DescriptionEnsures CloudFormation parameters that reference sensitive values are configured to use NoEcho.
More InfoCloudFormation supports the NoEcho property for sensitive values, which should be used to ensure secrets are not exposed in the CloudFormation UI and APIs.
AWS Linkhttps://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/parameters-section-structure.html
Recommended ActionUpdate the sensitive parameters to use the NoEcho property.

Detailed Remediation Steps

Cloud Security Posture Management (CSPM)

Scan, monitor and remediate configuration issues in public cloud accounts according to best practices and compliance standards, across AWS, Azure, Google Cloud, and Oracle Cloud.
Sign up for free
Cloud native security as-a-service
Aqua Wave
Get Started
Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2021 Aqua Security Software Ltd.   Privacy Policy | Terms of Use