azure-keyvault-secret-value

A Key Vault secret version returns its plaintext value through the data-plane get operation.

azurecritical service: azure:keyvault emits CanReadSecret

Where it sits

locationKey Vault Secret.value
location kindsecret_value
data kindscredential password api_key access_key secret_key oauth_token connection_string private_key signing_secret
emits edgeCanReadSecret
serviceKey Vault (azure:keyvault)

Collection recipe

access modedata_plane
operationSecrets - Get
response pathvalue
encodingjson
params{"secret-name": "\u003csecret-name\u003e", "secret-version": "\u003coptional-version\u003e", "vaultBaseUrl": "https://\u003cvault-name\u003e.vault.azure.net"}

Required permissions

Microsoft.KeyVault/vaults/secrets/getSecret/action

References

move · open · esc close