Azure Service Management Certificate

Description

General

Documentation: https://docs.microsoft.com/en-us/azure/cloud-services/cloud-services-certs-create
Summary: Azure is a cloud computing service created by Microsoft. This detector aims at detecting service management certificates that are used to authenticate with the management API.
IPs allowlist: See API Management policies.
Scopes: Keys are specific to an API.

Revoke the secret

Keys can be rotated from Azure portal, PowerShell and Azure CLI.

Check for suspicious activity

Azure gives access to detailed logs, see Azure platform logs.

Details for `Azure service management certificate`

Family: Api
Category: Cloud Provider
Company: Microsoft
High recall: False
Validity check available: False
Minimum number of matches: 1
Occurrences found for one million commits: 0.23
Prefixed: False
PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - managementcertificate
- type: ContentWhitelistPreValidator
  patterns:
    - microsoft
    - azure

Examples

- text: azure ManagementCertificate=c2F1bnRiYWVvcmN1YmEscy5yY3BiaWMsLidkNGlkcmNieXJjMzRkOVs4MzQnZHkycmMuNGlrLC9kMGEuZHViMjMJcmN1ZC9yJ2sbLS8uLHUzZDgnMjNkNHUvMGsbZDJpJy9yYywzNGRyY2lkY3IvdSczZDQvaSczNGl4L3JjMyc0eGlyL2MnMzR4aXIvJzM0eGlyLwo=
  apikey: c2F1bnRiYWVvcmN1YmEscy5yY3BiaWMsLidkNGlkcmNieXJjMzRkOVs4MzQnZHkycmMuNGlrLC9kMGEuZHViMjMJcmN1ZC9yJ2sbLS8uLHUzZDgnMjNkNHUvMGsbZDJpJy9yYywzNGRyY2lkY3IvdSczZDQvaSczNGl4L3JjMyc0eGlyL2MnMzR4aXIvJzM0eGlyLwo=