azure-keyvault-secret-values

Key Vault secret values read over the data plane - the actual stored secrets.

azurecritical service: azure:dataplane emits CanReadSecret

Where it sits

location{vaultUri}/secrets/{name} -> value
location kindsecret_value
data kindscredential secret
emits edgeCanReadSecret
serviceAzure data-plane confirmed leaks (azure:dataplane)

Collection recipe

access moderead_api
operationazure:keyvault:secretValues
response pathsecrets[].value
encodingjson
params{"resource_id": "\u003cazure-resource-id\u003e"}

Required permissions

Microsoft.KeyVault/vaults/secrets/getSecret/action
move · open · esc close