AWS > CloudFormation >

CloudFormation Plaintext Parameters

MEDIUM

Source

CloudSploit

cloudformation-plaintext-parameters

management console

CloudFormation Plaintext Parameters

Ensures CloudFormation parameters that reference sensitive values are configured to use NoEcho.

CloudFormation supports the NoEcho property for sensitive values, which should be used to ensure secrets are not exposed in the CloudFormation UI and APIs.

Recommended Actions

Update the sensitive parameters to use the NoEcho property.

Links

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/parameters-section-structure.html

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.