CRITICAL
Source
Trivy
Deprecated
true
ID
AVD-AWS-0134

Secrets should not be exfiltrated using Terraform HTTP data blocks

The data.http block can be used to send secret data outside of the organisation.

Impact

Follow the appropriate remediation steps below to resolve the issue.

Remove this potential exfiltration HTTP request.

1
2
3
4
5
resource "aws_ssm_parameter" "db_password" {
  name  = "db_password"
  type  = "SecureString"
  value = var.db_password
}