azure-policy-policy-remediation-deployment-output

deployIfNotExists remediation deployments can echo template outputs, errors, or script data.

azurehigh service: azure:policy emits ContainsSecret

Where it sits

locationMicrosoft.PolicyInsights/remediations/deployments deployment properties.outputs and operations.statusMessage
location kindoutput_value
data kindscredential password api_key access_key secret_key oauth_token connection_string sensitive_data pii customer_data
emits edgeContainsSecret
serviceAzure Policy (azure:policy)

Collection recipe

access moderead_api
operationRemediations - List Deployments At Resource Group
response pathvalue[].properties.{outputs,statusMessage}
encodingjson
params{"resource_id": "\u003cazure-resource-id\u003e"}

Required permissions

Microsoft.PolicyInsights/remediations/listDeployments/read

References

move · open · esc close