azure-managedhsm-key-decrypt-output

Managed HSM decrypt operations return plaintext that may be credential material.

azurecritical service: azure:managedhsm emits CanReadSecret

Where it sits

locationManaged HSM Key decrypt response.result
location kindoutput_value
data kindscredential sensitive_data
emits edgeCanReadSecret
serviceManaged HSM (azure:managedhsm)

Collection recipe

access modedata_plane
operationKey Operations - Decrypt
response pathresult
encodingbase64
params{"resource_id": "\u003cazure-resource-id\u003e"}

Required permissions

Microsoft.KeyVault/managedHsm/keys/decrypt/action

References

move · open · esc close