Engineering Atlas
☰ Menu
PortfolioAtlasDeploySQLData ViewsEnvBites
PT
Engineering Atlas / Snippets / Encrypted CloudPagesURL Parameters
sfmc // AMPscriptPROJECT

Encrypted CloudPagesURL Parameters

Pass subscriber/context values to a CloudPage without exposing raw query parameters.

ampscriptcloudpagescloudpagesurlsecurity
Context Pack →Open Workspace →
Trust & provenancePROJECT
Evidence tierPROJECTOfficial sources0Other sources0Last verifiedNot recorded

Evidence tier describes my hands-on relationship with the content. Official sources describe platform contracts/documentation. Production observations should not automatically be treated as official limits.

%%[
VAR @url
SET @url = CloudPagesURL(1234,
  'sk', _subscriberkey,
  'job', jobid
)
]%%
<a href="%%=RedirectTo(@url)=%%">Manage preferences</a>
Operational notes

CloudPagesURL protects parameter values using Marketing Cloud link wrapping; still validate authorization/business rules on the receiving page.

Connected knowledge

Keep following the context.

Explicit and inferred relationships from the Atlas model.

View this node in graph →
Snippet
CloudPagesURL() with Encrypted Parameters

Pass customer context from email to a CloudPage using Salesforce encrypted query-string handling.

Shared context: ampscript, cloudpages, cloudpagesurl
Runbook
CloudPage Production Incident

Triage a public CloudPage that is erroring, writing bad data, redirecting incorrectly or receiving malformed context.

Shared context: ampscript, cloudpages, security
Production Bite
Encrypted Query String Does Not Mean “Skip Validation”

A CloudPage trusts decrypted/request parameters directly for updates, preference changes or record access.

Shared context: cloudpages, cloudpagesurl, security
Recipe
CloudPage Safe Write Flow

Structure a CloudPage write path around validated context, idempotent updates and explicit failure handling.

Shared context: ampscript, cloudpages, security
Snippet
CloudPage — Read & Validate Request Parameters

Read request parameters and reject missing required identity context.

Shared context: ampscript, cloudpages
Snippet
Validate CloudPage Request Parameters Before Writes

Gate state-changing CloudPage logic behind explicit input and record validation.

Shared context: cloudpages, security
Pattern
Hardcoded Credentials in Scripts or Assets

Credentials embedded in SSJS, CloudPages or Content Builder become difficult to rotate, audit and protect.

Shared context: cloudpages, security
Production Bite
CloudPagesURL from SMS/Push Has an All Subscribers Trap

A CloudPagesURL link used from SMS or push returns an error for a recipient.

Shared context: cloudpagesurl