azure-subscriptions-resource-group-tags

Resource-group tags are plaintext and frequently copied into inventory, billing, and logs.

azuremedium service: azure:subscriptions emits ContainsSecret

Where it sits

locationMicrosoft.Resources/subscriptions/resourceGroups.tags.*
location kindtag
data kindscredential api_key sensitive_data pii
emits edgeContainsSecret
serviceSubscriptions/RG (azure:subscriptions)

Collection recipe

access moderead_api
operationResource Groups - Get
response pathtags
encodingmap
params{"resource_id": "\u003cazure-resource-id\u003e"}

Required permissions

Microsoft.Resources/subscriptions/resourceGroups/read

References

move · open · esc close