azure-cosmosdb-account-master-keys

Cosmos DB master keys grant broad account data-plane access.

azurecritical service: azure:cosmosdb emits ExposesCredential

Where it sits

locationMicrosoft.DocumentDB/databaseAccounts/listKeys response.{primaryMasterKey,secondaryMasterKey}
location kindsecret_value
data kindscredential access_key secret_key
emits edgeExposesCredential
serviceCosmos DB (azure:cosmosdb)

Collection recipe

access moderead_api
operationDatabase Accounts - List Keys
response path{primaryMasterKey,secondaryMasterKey}
encodingjson
params{"resource_id": "\u003cazure-resource-id\u003e"}

Required permissions

Microsoft.DocumentDB/databaseAccounts/listKeys/action

References

move · open · esc close