Skip to content

Commit 9476422

Browse files
authored
Make example AWS UUIDS follow a specific pattern (#1539)
Make example AWS UUIDS follow a specific pattern SUMMARY Various AWS IAM resources have UUID which follow a specific pattern. Similarly AWS accounts are all 12 digit numbers (text aliases in a couple of cases). To minimize the risk of accidental data leaks use a consistent Account ID in examples (123456789012), and a specific format for the UUIDS: (AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)12345EXAMPLE54321 While this does nothing about historic data, having consistency makes it easier to prevent future leaks. Note: We should follow this up with an update to the developer docs, however I'd like to get this in prior to 5.0.0 ISSUE TYPE Docs Pull Request COMPONENT NAME plugins/modules/acm_certificate_info.py plugins/modules/application_autoscaling_policy.py plugins/modules/autoscaling_launch_config.py plugins/modules/autoscaling_launch_config_info.py plugins/modules/codecommit_repository.py plugins/modules/directconnect_link_aggregation_group.py plugins/modules/dms_endpoint.py plugins/modules/dynamodb_table.py plugins/modules/ec2_transit_gateway_info.py plugins/modules/ec2_transit_gateway_vpc_attachment.py plugins/modules/ec2_transit_gateway_vpc_attachment_info.py plugins/modules/ec2_vpc_peer.py plugins/modules/ec2_vpc_peering_info.py plugins/modules/ec2_vpc_vpn_info.py plugins/modules/ecs_cluster.py plugins/modules/ecs_ecr.py plugins/modules/ecs_service.py plugins/modules/ecs_service_info.py plugins/modules/ecs_task.py plugins/modules/efs.py plugins/modules/efs_info.py plugins/modules/eks_cluster.py plugins/modules/elasticache_subnet_group.py plugins/modules/elb_network_lb.py plugins/modules/elb_target_group.py plugins/modules/elb_target_group_info.py plugins/modules/elb_target_info.py plugins/modules/iam_group.py plugins/modules/iam_managed_policy.py plugins/modules/iam_mfa_device_info.py plugins/modules/iam_server_certificate_info.py plugins/modules/lightsail.py plugins/modules/lightsail_static_ip.py plugins/modules/msk_cluster.py plugins/modules/s3_bucket_notification.py plugins/modules/sns_topic.py plugins/modules/sns_topic_info.py plugins/modules/sqs_queue.py plugins/modules/stepfunctions_state_machine.py plugins/modules/stepfunctions_state_machine_execution.py plugins/modules/storagegateway_info.py plugins/modules/wafv2_web_acl.py ADDITIONAL INFORMATION While the 'secret' nature of these UUIDs is debatable (they're closer to user names than passwords), deliberately mangling them makes it easier for InfoSec teams to spot when their secret counterparts may have been leaked in combination with a real 'public' part.
1 parent 65afb13 commit 9476422

File tree

183 files changed

+484
-477
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

183 files changed

+484
-477
lines changed

plugins/modules/acm_certificate_info.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -70,7 +70,7 @@
7070
# The output is still a list of certificates, just one item long.
7171
- name: obtain information about a certificate with a particular ARN
7272
community.aws.aws_acm_info:
73-
certificate_arn: "arn:aws:acm:ap-southeast-2:123456789876:certificate/abcdeabc-abcd-1234-4321-abcdeabcde12"
73+
certificate_arn: "arn:aws:acm:ap-southeast-2:123456789012:certificate/abcdeabc-abcd-1234-4321-abcdeabcde12"
7474
7575
'''
7676

plugins/modules/application_autoscaling_policy.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -216,7 +216,7 @@
216216
description: The ARN of an IAM role that allows Application Auto Scaling to modify the scalable target on your behalf. Required if I(state) is C(present).
217217
returned: when state present
218218
type: str
219-
sample: arn:aws:iam::123456789123:role/roleName
219+
sample: arn:aws:iam::123456789012:role/roleName
220220
step_scaling_policy_configuration:
221221
description: The step scaling policy.
222222
returned: when state present and the policy type is StepScaling

plugins/modules/autoscaling_launch_config.py

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -259,7 +259,7 @@
259259
description: The Amazon Resource Name of the launch configuration.
260260
returned: when I(state=present)
261261
type: str
262-
sample: arn:aws:autoscaling:us-east-1:148830907657:launchConfiguration:888d9b58-d93a-40c4-90cf-759197a2621a:launchConfigurationName/launch_config_name
262+
sample: arn:aws:autoscaling:us-east-1:123456789012:launchConfiguration:888d9b58-d93a-40c4-90cf-759197a2621a:launchConfigurationName/launch_config_name
263263
changed:
264264
description: Whether the state of the launch configuration has changed.
265265
returned: always
@@ -391,7 +391,7 @@
391391
description: The Amazon Resource Name (ARN) of the launch configuration.
392392
returned: when I(state=present)
393393
type: str
394-
sample: arn:aws:autoscaling:us-east-1:148830907657:launchConfiguration:888d9b58-d93a-40c4-90cf-759197a2621a:launchConfigurationName/launch_config_name
394+
sample: arn:aws:autoscaling:us-east-1:123456789012:launchConfiguration:888d9b58-d93a-40c4-90cf-759197a2621a:launchConfigurationName/launch_config_name
395395
member:
396396
description: ""
397397
returned: when I(state=present)

plugins/modules/autoscaling_launch_config_info.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -126,7 +126,7 @@
126126
description: Amazon Resource Name (ARN) of the launch configuration.
127127
type: str
128128
returned: always
129-
sample: "arn:aws:autoscaling:us-east-1:666612345678:launchConfiguration:ba785e3a-dd42-6f02-4585-ea1a2b458b3d:launchConfigurationName/lc-app"
129+
sample: "arn:aws:autoscaling:us-east-1:123456798012:launchConfiguration:ba785e3a-dd42-6f02-4585-ea1a2b458b3d:launchConfigurationName/lc-app"
130130
launch_configuration_name:
131131
description: Name of the launch configuration.
132132
type: str

plugins/modules/codecommit_repository.py

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -52,12 +52,12 @@
5252
description: "The ID of the AWS account associated with the repository."
5353
returned: when state is present
5454
type: str
55-
sample: "268342293637"
55+
sample: "123456789012"
5656
arn:
5757
description: "The Amazon Resource Name (ARN) of the repository."
5858
returned: when state is present
5959
type: str
60-
sample: "arn:aws:codecommit:ap-northeast-1:268342293637:username"
60+
sample: "arn:aws:codecommit:ap-northeast-1:123456789012:username"
6161
clone_url_http:
6262
description: "The URL to use for cloning the repository over HTTPS."
6363
returned: when state is present

plugins/modules/directconnect_link_aggregation_group.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -115,7 +115,7 @@
115115
"connection_state": "down",
116116
"lag_id": "dxlag-fgnsp4rq",
117117
"location": "EqSe2",
118-
"owner_account": "448830907657",
118+
"owner_account": "123456789012",
119119
"region": "us-west-2"
120120
}
121121
]

plugins/modules/dms_endpoint.py

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -183,7 +183,7 @@
183183
- The ARN that uniquely identifies the endpoint.
184184
type: str
185185
returned: success
186-
example: "arn:aws:dms:us-east-1:012345678901:endpoint:1234556789ABCDEFGHIJKLMNOPQRSTUVWXYZ012"
186+
example: "arn:aws:dms:us-east-1:123456789012:endpoint:1234556789ABCDEFGHIJKLMNOPQRSTUVWXYZ012"
187187
endpoint_identifier:
188188
description:
189189
- The database endpoint identifier.
@@ -213,7 +213,7 @@
213213
- An KMS key ID that is used to encrypt the connection parameters for the endpoint.
214214
type: str
215215
returned: success
216-
example: "arn:aws:kms:us-east-1:012345678901:key/01234567-abcd-12ab-98fe-123456789abc"
216+
example: "arn:aws:kms:us-east-1:123456789012:key/01234567-abcd-12ab-98fe-123456789abc"
217217
port:
218218
description:
219219
- The port used to access the endpoint.

plugins/modules/ec2_transit_gateway_info.py

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -136,7 +136,7 @@
136136
description: The AWS account number ID which owns the transit gateway.
137137
returned: always
138138
type: str
139-
sample: "1234567654323"
139+
sample: "123456789012"
140140
state:
141141
description: The state of the transit gateway.
142142
returned: always
@@ -153,7 +153,7 @@
153153
description: The Amazon Resource Name (ARN) of the transit gateway.
154154
returned: always
155155
type: str
156-
sample: "arn:aws:ec2:us-west-2:1234567654323:transit-gateway/tgw-02c42332e6b7da829"
156+
sample: "arn:aws:ec2:us-west-2:123456789012:transit-gateway/tgw-02c42332e6b7da829"
157157
transit_gateway_id:
158158
description: The ID of the transit gateway.
159159
returned: always

plugins/modules/ec2_transit_gateway_vpc_attachment.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -214,7 +214,7 @@
214214
- The ID of the account that the VPC belongs to.
215215
type: str
216216
returned: success
217-
example: '012345678901'
217+
example: '123456789012'
218218
'''
219219

220220

plugins/modules/ec2_transit_gateway_vpc_attachment_info.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -142,7 +142,7 @@
142142
- The ID of the account that the VPC belongs to.
143143
type: str
144144
returned: success
145-
example: '012345678901'
145+
example: '123456789012'
146146
'''
147147

148148

0 commit comments

Comments
 (0)