azure-vmss-model-customdata
Scale-set custom data is a deployment input copied to instances and can multiply exposure of embedded secrets.
Where it sits
| location | Microsoft.Compute/virtualMachineScaleSets.properties.virtualMachineProfile.osProfile.customData |
| location kind | bootstrap_script |
| data kinds | credential password api_key access_key secret_key oauth_token connection_string source_code_secret |
| emits edge | ContainsSecret |
| service | VM Scale Sets (azure:vmss) |
Collection recipe
| access mode | write_only_input |
| operation | Virtual Machine Scale Sets - Create Or Update |
| response path | request.properties.virtualMachineProfile.osProfile.customData |
| encoding | base64 |
| params | {"resource_id": "\u003cazure-resource-id\u003e"} |
Required permissions
Microsoft.Compute/virtualMachineScaleSets/write
References