azure-servicebus-dead-letter-messages

Dead-letter queues retain original bodies plus error descriptions that may expose sensitive payloads.

azurecritical service: azure:servicebus emits CanReadData

Where it sits

locationService Bus dead-letter subqueue Message.{body,applicationProperties,deadLetterReason,deadLetterErrorDescription}
location kindmessage_body
data kindscredential password api_key access_key secret_key oauth_token connection_string sensitive_data pii customer_data
emits edgeCanReadData
serviceService Bus (azure:servicebus)

Collection recipe

access modedata_plane
operationService Bus Peek/Receive Dead-letter Messages
response pathmessages[]
encodingprotocol_native
params{"resource_id": "\u003cazure-resource-id\u003e"}

Required permissions

Microsoft.ServiceBus/namespaces/queues/messages/receive/action

References

move · open · esc close