azure-vm-osprofile-customdata
Base64-encoded cloud-init or bootstrap data can contain passwords, tokens, private keys, and application secrets; ARM does not return it after provisioning.
Where it sits
location Microsoft.Compute/virtualMachines.properties.osProfile.customDatalocation kind bootstrap_scriptdata kinds credential password api_key access_key secret_key oauth_token connection_string source_code_secret emits edge ContainsSecretservice Virtual Machines (azure:vm)
Collection recipe
access mode write_only_inputoperation Virtual Machines - Create Or Updateresponse path request.properties.osProfile.customDataencoding base64params {"resource_id": "\u003cazure-resource-id\u003e"}
Required permissions
Microsoft.Compute/virtualMachines/write
Copy
References