azure-automation-credential-value

Automation credential assets store a username/password for runbook use; the password is exposed only within authorized job execution. No single Azure RBAC action authorizes this service-native path; its own authentication and authorization apply.

azurecritical service: azure:automation emits CanReadCredential

Where it sits

locationMicrosoft.Automation/automationAccounts/credentials get response.properties.{userName,password}
location kindsecret_value
data kindscredential password
emits edgeCanReadCredential
serviceAzure Automation (azure:automation)

Collection recipe

access modedata_plane
operationGet-AutomationPSCredential inside runbook
response pathPSCredential
encodingjson
params{"resource_id": "\u003cazure-resource-id\u003e"}

References

move · open · esc close