azure-logicapps-api-connection-keys

API Connection key retrieval can expose connector authentication material.

azurecritical service: azure:logicapps emits ExposesCredential

Where it sits

locationMicrosoft.Web/connections/listConnectionKeys response.{connectionKey,parameterValues}
location kindsecret_value
data kindscredential password api_key access_key secret_key oauth_token connection_string
emits edgeExposesCredential
serviceLogic Apps (azure:logicapps)

Collection recipe

access moderead_api
operationConnections - List Connection Keys
response path{connectionKey,parameterValues}
encodingjson
params{"resource_id": "\u003cazure-resource-id\u003e"}

Required permissions

Microsoft.Web/connections/listConnectionKeys/action

References

move · open · esc close