azure-functions-diagnostic-log-stream

Function app application and platform logs can contain request data, headers, stack traces, or environment values.

azurehigh service: azure:functions emits ContainsSecret

Where it sits

locationMicrosoft.Web/sites log stream and diagnostic log content
location kindlog_field
data kindscredential password api_key access_key secret_key oauth_token connection_string sensitive_data pii customer_data
emits edgeContainsSecret
serviceAzure Functions (azure:functions)

Collection recipe

access modedata_plane
operationWeb Apps - Get Web Site Log
response path$value
encodingstring
params{"resource_id": "\u003cazure-resource-id\u003e"}

Required permissions

Microsoft.Web/sites/logs/read

References

move · open · esc close