azure-blueprints-blueprint-parameters
Blueprint parameter defaults are persisted in plaintext when authors embed credentials.
Where it sits
| location | Microsoft.Blueprint/blueprints.properties.parameters.*.defaultValue |
| location kind | iac_template |
| data kinds | credential password api_key access_key secret_key oauth_token connection_string |
| emits edge | ContainsSecret |
| service | Blueprints/Deployment Stacks (azure:blueprints) |
Collection recipe
| access mode | read_api |
| operation | Blueprints - Get |
| response path | properties.parameters |
| encoding | json |
| params | {"resource_id": "\u003cazure-resource-id\u003e"} |
Required permissions
Microsoft.Blueprint/blueprints/read
References