Parameter NoEcho in Metadata or Outputs

[kddejong]

Is this feature request related to a new rule or cfn-lint capabilities?

rules

Describe the feature you'd like to request

Using the NoEcho attribute does not mask any information stored in the following:

The Metadata template section. CloudFormation does not transform, modify, or redact any information you include in the Metadata section. For more information, see [Metadata](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/metadata-section-structure.html).

The Outputs template section. For more information, see [Outputs](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/outputs-section-structure.html).

The Metadata attribute of a resource definition. For more information, [Metadata attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-metadata.html).

We strongly recommend you do not use these mechanisms to include sensitive information, such as passwords or secrets.

Describe the solution you'd like

Validate that any parameters with NoEcho are not in Metadata or Outputs

Additional context

No response

Is this something that you'd be interested in working on?

• 👋 I may be able to implement this feature request

Would this feature include a breaking change?

• ⚠️ This feature might incur a breaking change