Azure App Configuration Connection String

Description

General

• Documentation: https://learn.microsoft.com/en-us/azure/azure-app-configuration/
• Summary: Azure App Configuration provides a service to centrally manage application settings and feature flags.
• IPs allowlist: See API Management policies.
• Scopes: Connection strings are specific to an Azure App Configuration instance.

Revoke the secret

It is possible to rotate keys from the Azure portal.

Check for suspicious activity

Azure gives access to detailed logs, see Azure platform logs.

Details for Azure app configuration connection string

• Family: credentials

• Category: cloud_provider

• Company: Microsoft

• High recall: False

• Validity check available: True

• Analyzer available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Minimum number of matches: 4

• Occurrences found for one million commits: 2.875

• Prefixed: False

• PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - \.azconfig\.io
- type: ContentWhitelistPreValidator
  patterns:
    - endpoint
- type: ContentWhitelistPreValidator
  patterns:
    - secret

Examples

- text: builder.Configuration.AddAzureAppConfiguration("Endpoint=https://app-configurations-19.azconfig.io;Id=Q89k;Secret=E70y0z6RMKoajAH8y9U6KAGdcE7QGR45HiN2zr7lWyIXmmyCvD25JQQJ99BDAC5RqLJazOPaABBCAZAC2oeV");
  id: Q89k
  secret: E70y0z6RMKoajAH8y9U6KAGdcE7QGR45HiN2zr7lWyIXmmyCvD25JQQJ99BDAC5RqLJazOPaABBCAZAC2oeV
  endpoint: https://app-configurations-19.azconfig.io
  connection_string: Endpoint=https://app-configurations-19.azconfig.io;Id=Q89k;Secret=E70y0z6RMKoajAH8y9U6KAGdcE7QGR45HiN2zr7lWyIXmmyCvD25JQQJ99BDAC5RqLJazOPaABBCAZAC2oeV
- text: |
    builder.Configuration.AddAzureAppConfiguration(options =>
    {
        options.Connect(
            "Endpoint=https://applicationconfig1000.azconfig.io;Id=T1M7;Secret=F1joyQwoV4YqVZw9Mtb1Xc653u3hpjy2y7oWez7CGlW0DxEhm5gLJQQJ88BDACYeBjFKgyCrAAABAZAC418i"
        );
        options.UseFeatureFlags();
    });
  id: T1M7
  secret: F1joyQwoV4YqVZw9Mtb1Xc653u3hpjy2y7oWez7CGlW0DxEhm5gLJQQJ88BDACYeBjFKgyCrAAABAZAC418i
  endpoint: https://applicationconfig1000.azconfig.io
  connection_string: Endpoint=https://applicationconfig1000.azconfig.io;Id=T1M7;Secret=F1joyQwoV4YqVZw9Mtb1Xc653u3hpjy2y7oWez7CGlW0DxEhm5gLJQQJ88BDACYeBjFKgyCrAAABAZAC418i
- text: |
    appconfig_conn_str = "Endpoint=https://app-co2-config.azconfig.io;Id=8/Iv;Secret=9qfVLXI2aDt1Wg0jPMnCLx5lHIDvdBuzucBti8of7+M="
  id: 8/Iv
  secret: 9qfVLXI2aDt1Wg0jPMnCLx5lHIDvdBuzucBti8of7+M=
  endpoint: https://app-co2-config.azconfig.io
  connection_string: Endpoint=https://app-co2-config.azconfig.io;Id=8/Iv;Secret=9qfVLXI2aDt1Wg0jPMnCLx5lHIDvdBuzucBti8of7+M=
  # connection string must be cut at the right place
- text: |
    Endpoint=https://kvrevisiontestphggnrwme4.azconfig.io;Id=xFOu;Secret=j3KCy8lMKEsEv0Esj/uhGxrXa07tM3Bfhk53mD4MttQ=","lastModified":"2023-07-21T23:12:46+00:00","readOnly":false},{"id":"iPhK","name":"Secondary","value":"Xfc5TICny66FFe4R76oL6ciDqq9ixc/wZF/m61P88dE=","connectionString":"Id=iPhK;Secret=aaaaaaaaaa23aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa=
  id: xFOu
  secret: j3KCy8lMKEsEv0Esj/uhGxrXa07tM3Bfhk53mD4MttQ=
  endpoint: https://kvrevisiontestphggnrwme4.azconfig.io
  connection_string: Endpoint=https://kvrevisiontestphggnrwme4.azconfig.io;Id=xFOu;Secret=j3KCy8lMKEsEv0Esj/uhGxrXa07tM3Bfhk53mD4MttQ=