Azure Service Management Certificate

Description

General

• Documentation: https://docs.microsoft.com/en-us/azure/cloud-services/cloud-services-certs-create

• Summary: Azure is a cloud computing service created by Microsoft. This detector aims at detecting service management certificates that are used to authenticate with the management API.

• IPs allowlist: See API Management policies.

• Scopes: Keys are specific to an API.

Revoke the secret

Keys can be rotated from Azure portal, PowerShell and Azure CLI.

Check for suspicious activity

Azure gives access to detailed logs, see Azure platform logs.

Details for Azure Service Management Certificate

• Family: credentials

• Category: cloud_provider

• Company: Microsoft

• High recall: False

• Validity check available: False

• Analyzer available: False

• Minimum number of matches: 1

• Occurrences found for one million commits: 0.23

• Prefixed: False

• PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - managementcertificate
- type: ContentWhitelistPreValidator
  patterns:
    - microsoft
    - azure

Examples

- text: azure ManagementCertificate=c2F1bnRiYWVvcmN1YmEscy5yY3BiaWMsLidkNGlkcmNieXJjMzRkOVs4MzQnZHkycmMuNGlrLC9kMGEuZHViMjMJcmN1ZC9yJ2sbLS8uLHUzZDgnMjNkNHUvMGsbZDJpJy9yYywzNGRyY2lkY3IvdSczZDQvaSczNGl4L3JjMyc0eGlyL2MnMzR4aXIvJzM0eGlyLwo=
  apikey: c2F1bnRiYWVvcmN1YmEscy5yY3BiaWMsLidkNGlkcmNieXJjMzRkOVs4MzQnZHkycmMuNGlrLC9kMGEuZHViMjMJcmN1ZC9yJ2sbLS8uLHUzZDgnMjNkNHUvMGsbZDJpJy9yYywzNGRyY2lkY3IvdSczZDQvaSczNGl4L3JjMyc0eGlyL2MnMzR4aXIvJzM0eGlyLwo=