azure-vmss-model-customdata

Scale-set custom data is a deployment input copied to instances and can multiply exposure of embedded secrets.

azurecritical service: azure:vmss emits ContainsSecret

Where it sits

locationMicrosoft.Compute/virtualMachineScaleSets.properties.virtualMachineProfile.osProfile.customData
location kindbootstrap_script
data kindscredential password api_key access_key secret_key oauth_token connection_string source_code_secret
emits edgeContainsSecret
serviceVM Scale Sets (azure:vmss)

Collection recipe

access modewrite_only_input
operationVirtual Machine Scale Sets - Create Or Update
response pathrequest.properties.virtualMachineProfile.osProfile.customData
encodingbase64
params{"resource_id": "\u003cazure-resource-id\u003e"}

Required permissions

Microsoft.Compute/virtualMachineScaleSets/write

References

move · open · esc close