azure-containerapps-console-system-logs

Application console and system log streams can contain tokens, payloads, and environment-derived values.

azurehigh service: azure:containerapps emits ContainsSecret

Where it sits

locationContainer Apps log stream messages
location kindlog_field
data kindscredential password api_key access_key secret_key oauth_token connection_string sensitive_data pii customer_data
emits edgeContainsSecret
serviceContainer Apps (azure:containerapps)

Collection recipe

access modedata_plane
operationContainer Apps - Get Container App Console Logs
response path$value
encodingstring
params{"resource_id": "\u003cazure-resource-id\u003e"}

Required permissions

Microsoft.App/containerApps/logstream/action

References

move · open · esc close