Also redact AWS_SECURITY_TOKEN (aws#3560)

Signed-off-by: Elliot Murphy <statik@users.noreply.github.com>
jeremydeshotel · Aug 7, 2019 · a81e560 · a81e560
1 parent 02ef2dc
commit a81e560
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/aws-cdk/lib/commands/doctor.ts b/packages/aws-cdk/lib/commands/doctor.ts
@@ -72,6 +72,6 @@ function displayCdkEnvironmentVariables() {
 
 function anonymizeAwsVariable(name: string, value: string) {
   if (name === 'AWS_ACCESS_KEY_ID') { return value.substr(0, 4) + '<redacted>'; }  // Show ASIA/AKIA key type, but hide identifier
-  if (name === 'AWS_SECRET_ACCESS_KEY' || name === 'AWS_SESSION_TOKEN') { return '<redacted>'; }
+  if (name === 'AWS_SECRET_ACCESS_KEY' || name === 'AWS_SESSION_TOKEN' || name === 'AWS_SECURITY_TOKEN') { return '<redacted>'; }
   return value;
 }