azure-keyvault-key-decrypt-output

Decrypt returns plaintext supplied ciphertext and can expose protected credential material.

azurecritical service: azure:keyvault emits CanReadSecret

Where it sits

locationKey Vault Key decrypt response.result
location kindoutput_value
data kindscredential sensitive_data
emits edgeCanReadSecret
serviceKey Vault (azure:keyvault)

Collection recipe

access modedata_plane
operationKey Operations - Decrypt
response pathresult
encodingbase64
params{"resource_id": "\u003cazure-resource-id\u003e"}

Required permissions

Microsoft.KeyVault/vaults/keys/decrypt/action

References

move · open · esc close