azure-storage-service-sas-token

listServiceSas mints a service-scoped plaintext SAS credential.

azurecritical service: azure:storage emits ExposesCredential

Where it sits

locationMicrosoft.Storage/storageAccounts/listServiceSas response.serviceSasToken
location kindoutput_value
data kindscredential session_token
emits edgeExposesCredential
serviceStorage Accounts (Blob/File/Queue/Table) (azure:storage)

Collection recipe

access moderead_api
operationStorage Accounts - List Service SAS
response pathserviceSasToken
encodingjson
params{"resource_id": "\u003cazure-resource-id\u003e"}

Required permissions

Microsoft.Storage/storageAccounts/listServiceSas/action

References

move · open · esc close