azure-storage-account-sas-token

listAccountSas mints a scoped plaintext SAS credential.

azurecritical service: azure:storage emits ExposesCredential

Where it sits

locationMicrosoft.Storage/storageAccounts/listAccountSas response.accountSasToken
location kindoutput_value
data kindscredential session_token
emits edgeExposesCredential
serviceStorage Accounts (Blob/File/Queue/Table) (azure:storage)

Collection recipe

access moderead_api
operationStorage Accounts - List Account SAS
response pathaccountSasToken
encodingjson
params{"resource_id": "\u003cazure-resource-id\u003e"}

Required permissions

Microsoft.Storage/storageAccounts/listAccountSas/action

References

move · open · esc close