Skip to content

Commit

Permalink
Browse files Browse the repository at this point in the history
  • Loading branch information
felixfontein committed Mar 13, 2021
1 parent fb0a2b3 commit f6688b3
Show file tree
Hide file tree
Showing 4 changed files with 7 additions and 3 deletions.
4 changes: 4 additions & 0 deletions changelogs/fragments/community.aws-475-no_log-missing.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,4 @@
security_fixes:
- "aws_direct_connect_virtual_interface - mark the ``authentication_key`` parameter as ``no_log`` to avoid accidental leaking of secrets in logs (https://github.com/ansible-collections/community.aws/pull/475)."
- "sts_assume_role - mark the ``mfa_token`` parameter as ``no_log`` to avoid accidental leaking of secrets in logs (https://github.com/ansible-collections/community.aws/pull/475)."
- "sts_session_token - mark the ``mfa_token`` parameter as ``no_log`` to avoid accidental leaking of secrets in logs (https://github.com/ansible-collections/community.aws/pull/475)."
Original file line number Diff line number Diff line change
Expand Up @@ -451,7 +451,7 @@ def main():
name=dict(),
vlan=dict(type='int', default=100),
bgp_asn=dict(type='int', default=65000),
authentication_key=dict(),
authentication_key=dict(no_log=True),
amazon_address=dict(),
customer_address=dict(),
address_type=dict(),
Expand Down
2 changes: 1 addition & 1 deletion lib/ansible/modules/cloud/amazon/sts_assume_role.py
Original file line number Diff line number Diff line change
Expand Up @@ -162,7 +162,7 @@ def main():
external_id=dict(required=False, default=None),
policy=dict(required=False, default=None),
mfa_serial_number=dict(required=False, default=None),
mfa_token=dict(required=False, default=None)
mfa_token=dict(required=False, default=None, no_log=True)
)
)

Expand Down
2 changes: 1 addition & 1 deletion lib/ansible/modules/cloud/amazon/sts_session_token.py
Original file line number Diff line number Diff line change
Expand Up @@ -133,7 +133,7 @@ def main():
dict(
duration_seconds=dict(required=False, default=None, type='int'),
mfa_serial_number=dict(required=False, default=None),
mfa_token=dict(required=False, default=None)
mfa_token=dict(required=False, default=None, no_log=True)
)
)

Expand Down

0 comments on commit f6688b3

Please sign in to comment.