💼 [CodeBuild.1] CodeBuild Bitbucket source repository URLs should not contain sensitive credentials

• Contextual name: 💼 [CodeBuild.1] CodeBuild Bitbucket source repository URLs should not contain sensitive credentials

• ID: /frameworks/aws-fsbp-v1.0.0/codebuild/01

• Located in: 💼 CodeBuild

Description

Sign-in credentials shouldn't be stored or transmitted in clear text or appear in the source repository URL. Instead of personal access tokens or sign-in credentials, you should access your source provider in CodeBuild, and change your source repository URL to contain only the path to the Bitbucket repository location. Using personal access tokens or sign-in credentials could result in unintended data exposure or unauthorized access.

Similar

• AWS Security Hub
  • https://docs.aws.amazon.com/securityhub/latest/userguide/codebuild-controls.html#codebuild-1
• Internal
  • ID: dec-c-cd4be6a9

Similar Sections (Give Policies To)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 NIST SP 800-53 Revision 5 → 💼 SA-3 System Development Life Cycle	3
💼 PCI DSS v3.2.1 → 💼 8.2.1 Using strong cryptography, render all authentication credentials unreadable during transmission and storage on all system components.
💼 PCI DSS v4.0.1 → 💼 8.3.2 Strong cryptography is used to render all authentication factors unreadable during transmission and storage on all system components.

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags