Aqua CSPM

CloudFormation Plaintext Parameters

Quick Info

Plugin TitleCloudFormation Plaintext Parameters
CloudAWS
CategoryCloudFormation
DescriptionEnsures CloudFormation parameters that reference sensitive values are configured to use NoEcho.
More InfoCloudFormation supports the NoEcho property for sensitive values, which should be used to ensure secrets are not exposed in the CloudFormation UI and APIs.
AWS Linkhttps://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/parameters-section-structure.html
Recommended ActionUpdate the sensitive parameters to use the NoEcho property.

Detailed Remediation Steps