azure-vmss-extension-public-settings

Scale-set extension public settings are readable and may expose commands, URIs, or misplaced credentials.

azurecritical service: azure:vmss emits ContainsSecret

Where it sits

locationMicrosoft.Compute/virtualMachineScaleSets.properties.virtualMachineProfile.extensionProfile.extensions[].properties.settings
location kindconfig_field
data kindscredential password api_key access_key secret_key oauth_token connection_string source_code_secret
emits edgeContainsSecret
serviceVM Scale Sets (azure:vmss)

Collection recipe

access moderead_api
operationVirtual Machine Scale Sets - Get
response pathproperties.virtualMachineProfile.extensionProfile.extensions[].properties.settings
encodingjson
params{"resource_id": "\u003cazure-resource-id\u003e"}

Required permissions

Microsoft.Compute/virtualMachineScaleSets/read

References

move · open · esc close