azure-cosmosdb-read-only-keys

Read-only master keys grant account-wide data read access.

azurecritical service: azure:cosmosdb emits ExposesCredential

Where it sits

locationMicrosoft.DocumentDB/databaseAccounts/readonlykeys response.{primaryReadonlyMasterKey,secondaryReadonlyMasterKey}
location kindsecret_value
data kindscredential access_key secret_key
emits edgeExposesCredential
serviceCosmos DB (azure:cosmosdb)

Collection recipe

access moderead_api
operationDatabase Accounts - List Read Only Keys
response path{primaryReadonlyMasterKey,secondaryReadonlyMasterKey}
encodingjson
params{"resource_id": "\u003cazure-resource-id\u003e"}

Required permissions

Microsoft.DocumentDB/databaseAccounts/readonlykeys/action

References

move · open · esc close