azure-vm-userdata

Base64-encoded VM userData is persisted and retrievable through the VM model and can expose bootstrap credentials.

azurecritical service: azure:vm emits ContainsSecret

Where it sits

locationMicrosoft.Compute/virtualMachines.properties.userData
location kindbootstrap_script
data kindscredential password api_key access_key secret_key oauth_token connection_string source_code_secret
emits edgeContainsSecret
serviceVirtual Machines (azure:vm)

Collection recipe

access moderead_api
operationVirtual Machines - Get
response pathproperties.userData
encodingbase64
params{"$expand": "userData", "resource_id": "\u003cvirtual-machine-resource-id\u003e"}

Required permissions

Microsoft.Compute/virtualMachines/read

References

move · open · esc close