azure-blueprints-deployment-stack-outputs

Deployment outputs can deliberately or accidentally publish secrets and sensitive resource data.

azurecritical service: azure:blueprints emits ContainsSecret

Where it sits

locationMicrosoft.Resources/deploymentStacks.properties.outputs.*.value
location kindoutput_value
data kindscredential password api_key access_key secret_key oauth_token connection_string sensitive_data pii customer_data
emits edgeContainsSecret
serviceBlueprints/Deployment Stacks (azure:blueprints)

Collection recipe

access moderead_api
operationDeployment Stacks - Get At Resource Group
response pathproperties.outputs
encodingjson
params{"resource_id": "\u003cazure-resource-id\u003e"}

Required permissions

Microsoft.Resources/deploymentStacks/read

References

move · open · esc close