SPLOIT-113: Updated custom settings

AkhtarAmir · Aug 14, 2020 · ce65325 · ce65325
1 parent 3da6672
commit ce65325
Showing 1 changed file with 6 additions and 6 deletions.
diff --git a/plugins/aws/cloudformation/plainTextParameters.js b/plugins/aws/cloudformation/plainTextParameters.js
@@ -10,19 +10,19 @@ module.exports = {
     recommended_action: 'Update the sensitive parameters to use the NoEcho property.',
     apis: ['CloudFormation:describeStacks'],
     settings: {
-        plainTextParameters: {
-            secretWords: [
-                'secret', 'password', 'privatekey'
-            ]
+        plain_text_parameters: {
+            name: "CloudFormation Plaintext Parameters",
+            description: "A comma-delimited list of parameter strings that indicate a sensitive value",
+            regex: "[a-zA-Z0-9,]",
+            default: "secret,password,privatekey"
         }
     },
 
     run: function(cache, settings, callback) {
         var results = [];
         var source = {};
         var regions = helpers.regions(settings);
-        secretWords = this.settings.plainTextParameters.secretWords;
-
+        secretWords = this.settings.plain_text_parameters.default;
         async.each(regions.cloudformation, function(region, rcb){
 
             var describeStacks = helpers.addSource(cache, source,