@pipeline-builder/api-core 5.2.5 → 5.2.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/lib/utils/aws-scrub.js +3 -3
- package/package.json +1 -1
package/lib/utils/aws-scrub.js
CHANGED
|
@@ -5,8 +5,8 @@
|
|
|
5
5
|
* outbound payload (audit `details`, ingested event `detail`, error messages).
|
|
6
6
|
*
|
|
7
7
|
* HARD CONSTRAINT: an AWS account id must NEVER be persisted anywhere in this
|
|
8
|
-
* system — `orgId` is the
|
|
9
|
-
* id. AWS surfaces (CodePipeline/CodeBuild failure messages, KMS/role ARNs) leak
|
|
8
|
+
* system — `orgId` is the platform org id (a Marketplace customer is keyed on its
|
|
9
|
+
* license ARN, in subscription metadata), never an AWS account id. AWS surfaces (CodePipeline/CodeBuild failure messages, KMS/role ARNs) leak
|
|
10
10
|
* the account id as the 5th ARN segment or as a bare 12-digit token, so scrub at
|
|
11
11
|
* every boundary that writes untrusted AWS-derived text. Defense-in-depth: apply
|
|
12
12
|
* this even when an upstream (e.g. the events Lambda) is expected to have
|
|
@@ -64,4 +64,4 @@ export function scrubAwsIdentifiers(value) {
|
|
|
64
64
|
}
|
|
65
65
|
return value;
|
|
66
66
|
}
|
|
67
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
67
|
+
//# sourceMappingURL=data:application/json;base64,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
|