azure-adls-resource-tags

Data Lake Storage Gen2 resource tag values are plaintext and broadly enumerable.

azuremedium service: azure:adls emits ContainsSecret

Where it sits

locationMicrosoft.Storage/storageAccounts.tags.*
location kindtag
data kindscredential api_key sensitive_data pii
emits edgeContainsSecret
serviceData Lake Storage Gen2 (azure:adls)

Collection recipe

access moderead_api
operationStorage Accounts - Get Properties
response pathtags
encodingmap
params{"resource_id": "\u003cazure-resource-id\u003e"}

Required permissions

Microsoft.Storage/storageAccounts/read

References

move · open · esc close