azure-blueprints-deployment-stack-outputs
Deployment outputs can deliberately or accidentally publish secrets and sensitive resource data.
Where it sits
| location | Microsoft.Resources/deploymentStacks.properties.outputs.*.value |
| location kind | output_value |
| data kinds | credential password api_key access_key secret_key oauth_token connection_string sensitive_data pii customer_data |
| emits edge | ContainsSecret |
| service | Blueprints/Deployment Stacks (azure:blueprints) |
Collection recipe
| access mode | read_api |
| operation | Deployment Stacks - Get At Resource Group |
| response path | properties.outputs |
| encoding | json |
| params | {"resource_id": "\u003cazure-resource-id\u003e"} |
Required permissions
Microsoft.Resources/deploymentStacks/read
References