azure-managedhsm-full-backup-storage-sas-input

Full-HSM backup accepts a storage-container SAS URI as a plaintext request field.

azurecritical service: azure:managedhsm emits ContainsSecret

Where it sits

locationManaged HSM Full Backup request.azureStorageBlobContainerUri
location kindconnection_string
data kindscredential session_token connection_string
emits edgeContainsSecret
serviceManaged HSM (azure:managedhsm)

Collection recipe

access modewrite_only_input
operationFull Backup - Start
response pathrequest.azureStorageBlobContainerUri
encodingurl_encoded
params{"resource_id": "\u003cazure-resource-id\u003e"}

Required permissions

Microsoft.KeyVault/managedHsm/backup/start/action

References

move · open · esc close