Azure Subscription Key

Description

General

• Documentation: https://docs.microsoft.com/en-us/azure/

• Summary: Azure is a cloud computing service created by Microsoft.
  Multiple APIs are available through Azure (Bing search, translation, speech recognition, etc), they all use the same authentication method, a token passed in a header named Ocp-Apim-Subscription-Key.

• IPs allowlist: See API Management policies.

• Scopes: Keys are specific to an API.

Revoke the secret

It is possible to rotate keys from the Azure portal, PowerShell and Azure CLI, see Manually rotate access keys.

Check for suspicious activity

Azure gives access to detailed logs, see Azure platform logs.

Details for Azure Subscription Key

• Family: token

• Category: cloud_provider

• Company: Microsoft

• High recall: False

• Validity check available: False

• Analyzer available: False

• Minimum number of matches: 1

• Occurrences found for one million commits: 12.06

• Prefixed: False

• PreValidators:

- type: FilenameBanlistPreValidator
  banlist_extensions: []
  banlist_filenames: []
  check_binaries: false
  include_default_banlist_extensions: true
  ban_markup: true
- type: ContentWhitelistPreValidator
  patterns:
    - subscription[-_]?key
    - apim[-_]?key
- type: ContentWhitelistPreValidator
  patterns:
    - \bbing\b
    - microsoft
    - azure

Examples

- text: |
    {
      "baseuri": "https://api.bing.microsoft.com/v7.0/search",
      "headers": { "Ocp-Apim-Subscription-Key": "bf7ccc0207494d5ea601f10af51ecfff" }
    }
  apikey: 'bf7ccc0207494d5ea601f10af51ecfff'
- text: |
    # Azure
    APIM_KEY=775216a0c72d44b790058a3e62f337ef
    }
  apikey: '775216a0c72d44b790058a3e62f337ef'
- text: |
    $GLOBALS["subscription_key"] = "65dae5acc8508967f4f09968643e29cf";
    $request = new Http_Request2('https://api.bing.microsoft.com/v7.0/search');
  apikey: '65dae5acc8508967f4f09968643e29cf'