azure-appservice-site-config-command-metadata
Web app startup commands and metadata are readable configuration fields where operators can embed sensitive strings.
Where it sits
| location | Microsoft.Web/sites.properties.siteConfig.{appCommandLine,linuxFxVersion,windowsFxVersion,metadata} |
| location kind | config_field |
| data kinds | credential password api_key access_key secret_key oauth_token connection_string source_code_secret |
| emits edge | ContainsSecret |
| service | App Service / Web Apps (azure:appservice) |
Collection recipe
| access mode | read_api |
| operation | Web Apps - Get |
| response path | properties.siteConfig |
| encoding | json |
| params | {"resource_id": "\u003cazure-resource-id\u003e"} |
Required permissions
Microsoft.Web/sites/read
References