azure-vm-boot-diagnostics-serial-log

Boot diagnostic serial logs can capture bootstrap output and the returned blob URI is itself a time-limited access credential.

azurecritical service: azure:vm emits ContainsSecret

Where it sits

locationMicrosoft.Compute/virtualMachines/retrieveBootDiagnosticsData.serialConsoleLogBlobUri
location kindlog_field
data kindscredential password api_key access_key secret_key oauth_token connection_string sensitive_data pii customer_data
emits edgeContainsSecret
serviceVirtual Machines (azure:vm)

Collection recipe

access moderead_api
operationVirtual Machines - Retrieve Boot Diagnostics Data
response pathserialConsoleLogBlobUri
encodingjson
params{"resource_id": "\u003cazure-resource-id\u003e"}

Required permissions

Microsoft.Compute/virtualMachines/retrieveBootDiagnosticsData/action

References

move · open · esc close