Azure Active Directory API Keys

Description

General

Documentation: https://learn.microsoft.com/en-us/azure/active-directory/
Summary: Azure Active Directory (Azure AD) is a cloud-based identity and access management service. This detector finds client secrets used by Azure AD applications to interact with Azure AD.
IPs allowlist: This feature is not available.
Scopes: The APIs an Azure AD application can call is defined in the "API permissions" section of the application configuration.

Revoke the secret

The "Certificates & secrets" section of the application configuration lists created secrets and makes it possible to revoke them.

Check for suspicious activity

This feature is not available.

Details for `Azure active directory api keys`

Family: Api
Category: Cloud Provider
Company: Microsoft
High recall: False
Validity check available: True
On-premise instances exist: False
Only valid secrets raise an alert: False
Minimum number of matches: 3
Occurrences found for one million commits: 1.382
Prefixed: False
PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - azure
- type: ContentWhitelistPreValidator
  patterns:
    - tenant
- type: ContentWhitelistPreValidator
  patterns:
    - client

Examples

- text: |
    spring.cloud.azure.active-directory.credential.client-id = df164709-2564-4159-bf90-bd19116313af
    spring.cloud.azure.active-directory.profile.tenant-id = d5dac156-dad8-4d95-85d1-7e5498469a23
    spring.cloud.azure.active-directory.credential.client-secret = 7lc8Q~Fzcideaz5fd64d6EZ41F6SD1f65z14EcTW
  client_id: df164709-2564-4159-bf90-bd19116313af
  tenant_id: d5dac156-dad8-4d95-85d1-7e5498469a23
  client_secret: 7lc8Q~Fzcideaz5fd64d6EZ41F6SD1f65z14EcTW

- text: |
    spring.cloud.azure.active-directory.credential.client-id = df164709-2564-4159-bf90-bd19116313af
    spring.cloud.azure.active-directory.profile.tenant-id = d5dac156-dad8-4d95-85d1-7e5498469a23
    spring.cloud.azure.active-directory.credential.client-secret = 3~K7Q~yxHSpLEt8z5YsP~pMcmAMOPlwxG4JcXbTg
  client_id: df164709-2564-4159-bf90-bd19116313af
  tenant_id: d5dac156-dad8-4d95-85d1-7e5498469a23
  client_secret: 3~K7Q~yxHSpLEt8z5YsP~pMcmAMOPlwxG4JcXbTg

- text: |
    env:
      AZURE_AD_CLIENT_ID: "6165ad13-9480-438c-8a07-156486468f28"
      AZURE_AD_CLIENT_SECRET: "4Qq8Q~O1jwfJ1xpddz1561SFen1vSPy6pP9~raJQ"
      AZURE_AD_TENANT_ID: "715614dd-1514-a47b-cdc6-34161ab131f9"
  client_id: 6165ad13-9480-438c-8a07-156486468f28
  tenant_id: 715614dd-1514-a47b-cdc6-34161ab131f9
  client_secret: 4Qq8Q~O1jwfJ1xpddz1561SFen1vSPy6pP9~raJQ