azure-vm-extension-protected-settings-input

Extension protected settings accept plaintext secret material during deployment but are not returned by ARM.

azurecritical service: azure:vm emits ContainsSecret

Where it sits

locationMicrosoft.Compute/virtualMachines/extensions.properties.protectedSettings
location kindsecret_value
data kindscredential password api_key access_key secret_key oauth_token connection_string
emits edgeContainsSecret
serviceVirtual Machines (azure:vm)

Collection recipe

access modewrite_only_input
operationVirtual Machine Extensions - Create Or Update
response pathrequest.properties.protectedSettings
encodingjson
params{"resource_id": "\u003cazure-resource-id\u003e"}

Required permissions

Microsoft.Compute/virtualMachines/extensions/write

References

move · open · esc close