azure-arm-deployments-deployment-script-output-logs

Script outputs and logs may echo environment values, command results, access tokens, or customer data.

azurecritical service: azure:arm-deployments emits ContainsSecret

Where it sits

locationMicrosoft.Resources/deploymentScripts properties.outputs and logs
location kindoutput_value
data kindscredential password api_key access_key secret_key oauth_token connection_string sensitive_data pii customer_data
emits edgeContainsSecret
serviceARM/Bicep Deployments (azure:arm-deployments)

Collection recipe

access moderead_api
operationDeployment Scripts - Get Logs
response pathproperties.outputs and logs
encodingjson
params{"resource_id": "\u003cazure-resource-id\u003e"}

Required permissions

Microsoft.Resources/deploymentScripts/read
Microsoft.Resources/deploymentScripts/logs/read

References

move · open · esc close