azure-blueprints-blueprint-parameters

Blueprint parameter defaults are persisted in plaintext when authors embed credentials.

azurecritical service: azure:blueprints emits ContainsSecret

Where it sits

locationMicrosoft.Blueprint/blueprints.properties.parameters.*.defaultValue
location kindiac_template
data kindscredential password api_key access_key secret_key oauth_token connection_string
emits edgeContainsSecret
serviceBlueprints/Deployment Stacks (azure:blueprints)

Collection recipe

access moderead_api
operationBlueprints - Get
response pathproperties.parameters
encodingjson
params{"resource_id": "\u003cazure-resource-id\u003e"}

Required permissions

Microsoft.Blueprint/blueprints/read

References

move · open · esc close