Exposure DB

GetWebACL.WebACL.Rules[].Statement.*.ByteMatchStatement.SearchString - leaks credential, password, api_key, bearer_token, sensitive_data

GetWebACL.WebACL.CustomResponseBodies.<key>.Content - leaks credential, api_key, sensitive_data, customer_data

GetWebACL.WebACL.Rules[].Action.{Allow,Captcha,Challenge}.CustomRequestHandling.InsertHeaders[].Value / WebACL.Rules[].Action.Block.CustomResponse.ResponseHeaders[].Value / WebACL.DefaultAction.Allow.CustomRequestHandling.InsertHeaders[].Value / WebACL.DefaultAction.Block.CustomResponse.ResponseHeaders[].Value - leaks credential, api_key, bearer_token, sensitive_data

GetRegexPatternSet.RegexPatternSet.RegularExpressionList[].RegexString - leaks credential, password, api_key, sensitive_data

ListTagsForResource.TagInfoForResource.TagList[].Value - leaks credential, sensitive_data

Kinesis Firehose/S3/CloudWatch WAF log record - leaks credential, password, api_key, bearer_token, session_token, pii, sensitive_data

Microsoft.ContainerInstance/containerGroups.properties.volumes[].azureFile.storageAccountKey - leaks credential, access_key, secret_key

Microsoft.ContainerInstance/containerGroups.properties.containers[].properties.command[] - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string

Microsoft.ContainerInstance/containerGroups.properties.containers[].properties.environmentVariables[].value - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string

Microsoft.ContainerInstance/containerGroups/containers/logs.content - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data

Microsoft.ContainerInstance/containerGroups.properties.containers[].properties.environmentVariables[].secureValue - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string

Microsoft.ContainerInstance/containerGroups.properties.diagnostics.logAnalytics.workspaceKey - leaks credential, access_key, secret_key

Microsoft.ContainerInstance/containerGroups.properties.imageRegistryCredentials[].password - leaks credential, password

Microsoft.ContainerInstance/containerGroups.tags.* - leaks credential, api_key, sensitive_data, pii

Microsoft.ContainerInstance/containerGroups.properties.volumes[].secret.* - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, private_key, certificate

Microsoft.ContainerRegistry/registries/listCredentials response.{username,passwords[].value} - leaks credential, password

OCI registry manifest, layer, configuration, and artifact blobs - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, private_key, source_code_secret

Microsoft.ContainerRegistry/registries.tags.* - leaks credential, api_key, sensitive_data, pii

Microsoft.ContainerRegistry/registries/generateCredentials response.{username,passwords[].value} - leaks credential, password, access_key

Microsoft.ContainerRegistry/registries/tasks.properties.step.*.env[].value - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string

Microsoft.ContainerRegistry/registries/runs/listLogSasUrl response.logLink and referenced log - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data

Microsoft.ContainerRegistry/registries/tasks/runs request.values[].{value,isSecret} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string

Microsoft.Storage/storageAccounts/listKeys response.keys[].value - leaks credential, access_key, secret_key

Data Lake Storage Gen2 Path x-ms-acl, owner, group - leaks sensitive_data, pii

Data Lake Storage Gen2 Path file bytes - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, private_key, source_code_secret, sensitive_data, pii, customer_data

Data Lake Storage Gen2 Path response headers x-ms-properties and metadata - leaks credential, api_key, sensitive_data, pii

Microsoft.Storage/storageAccounts.tags.* - leaks credential, api_key, sensitive_data, pii

Blob service SAS/account SAS/user delegation SAS URI query - leaks credential, session_token, signing_secret

Microsoft.ContainerService/managedClusters/listClusterAdminCredential response.kubeconfigs[].value - leaks credential, certificate, private_key

Microsoft.ContainerService/managedClusters/listClusterUserCredential response.kubeconfigs[].value - leaks credential, certificate, private_key, oauth_token

Kubernetes core/v1 ConfigMap.{data,binaryData} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, source_code_secret

Kubernetes ObjectMeta.{labels,annotations} - leaks credential, api_key, sensitive_data, pii

Kubernetes core/v1 Secret.{data,stringData} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, private_key, certificate

Kubernetes Pod log stream - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data

Microsoft.ContainerService/managedClusters.tags.* - leaks credential, api_key, sensitive_data, pii

Microsoft.ContainerService/managedClusters/runCommand response.{logs,exitCode} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data

Kubernetes PodSpec.containers[].{env,command,args} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string

Microsoft.AppConfiguration/configurationStores/listKeys response.value[].connectionString - leaks credential, access_key, secret_key, connection_string

App Configuration KeyValue.{key,value,content_type,tags} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data

Microsoft.AppConfiguration/configurationStores.tags.* - leaks credential, api_key, sensitive_data, pii

App Configuration Snapshot constituent KeyValue.value - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data

Microsoft.Web/sites/config/appsettings.properties.* - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string

Microsoft.Web/sites/config/connectionstrings.properties.*.{value,type} - leaks credential, password, connection_string, database_credential

SCM/Kudu /api/vfs and deployment repository file content - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, source_code_secret

Microsoft.Web/sites log stream and diagnostic log content - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data

Microsoft.Web/sites/publishxml publishingProfile.{userName,userPWD,destinationAppUrl,msdeploySite} - leaks credential, password

Microsoft.Web/sites.tags.* - leaks credential, api_key, sensitive_data, pii

Microsoft.Web/sites.properties.siteConfig.{appCommandLine,linuxFxVersion,windowsFxVersion,metadata} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, source_code_secret

Microsoft.Web/sites/slots/config/appsettings.properties.* - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string

Microsoft.Web/sites/slots/publishxml publishingProfile.{userName,userPWD} - leaks credential, password