azure-eventgrid-subscription-endpoint-and-deadletter

Event subscription webhook URLs, query strings, filters, labels, and dead-letter destinations can expose tokens or routing data.

azurecritical service: azure:eventgrid emits ContainsSecret

Where it sits

locationMicrosoft.EventGrid/eventSubscriptions.properties.{destination,deadLetterDestination,filter,labels}
location kindconfig_field
data kindscredential api_key webhook_secret sensitive_data
emits edgeContainsSecret
serviceEvent Grid (azure:eventgrid)

Collection recipe

access moderead_api
operationEvent Subscriptions - Get
response pathproperties
encodingjson
params{"resource_id": "\u003cazure-resource-id\u003e"}

Required permissions

Microsoft.EventGrid/eventSubscriptions/read

References

move · open · esc close