masked potential vulnerability

Author: mohamedzeidan2021

src/sagemaker/config/config_utils.py

@@ -18,6 +18,7 @@
 from collections import deque
 
 import logging
+import re
 import sys
 from typing import Callable
 
@@ -67,6 +68,12 @@ def _log_sagemaker_config_single_substitution(source_value, config_value, config
     """
     logger = get_sagemaker_config_logger()
 
+    sensitive_keywords = re.compile(r'(secret|password|key)', re.IGNORECASE)
+
+    if sensitive_keywords.search(config_key_path):
+        source_value = "***"
+        config_value = "***"
+
     if config_value is not None:
 
         if source_value is None: