azure-subscriptions-subscription-display-metadata

Subscription names, policies, tenant identifiers, and tags can reveal organizational details or embedded secrets.

azurehigh service: azure:subscriptions emits ContainsSecret

Where it sits

locationMicrosoft.Resources/subscriptions.{displayName,subscriptionPolicies,tenantId,tags}
location kindmetadata
data kindssensitive_data
emits edgeContainsSecret
serviceSubscriptions/RG (azure:subscriptions)

Collection recipe

access moderead_api
operationSubscriptions - Get
response path{displayName,subscriptionPolicies,tenantId,tags}
encodingjson
params{"resource_id": "\u003cazure-resource-id\u003e"}

Required permissions

Microsoft.Resources/subscriptions/read

References

move · open · esc close