Azure Subscription Key

Description

General

Documentation: https://docs.microsoft.com/en-us/azure/
Summary: Azure is a cloud computing service created by Microsoft.
Multiple APIs are available through Azure (Bing search, translation, speech recognition, etc), they all use the same authentication method, a token passed in a header named Ocp-Apim-Subscription-Key.
IPs allowlist: See API Management policies.
Scopes: Keys are specific to an API.

Revoke the secret

It is possible to rotate keys from the Azure portal, PowerShell and Azure CLI, see Manually rotate access keys.

Check for suspicious activity

Azure gives access to detailed logs, see Azure platform logs.

Details for `Azure subscription key`

Family: Api
Category: Cloud Provider
Company: Microsoft
High recall: False
Validity check available: False
Minimum number of matches: 1
Occurrences found for one million commits: 12.06
Prefixed: False
PreValidators:

- type: FilenameBanlistPreValidator
  banlist_extensions: []
  banlist_filenames: []
  check_binaries: false
  include_default_banlist_extensions: true
  ban_markup: true
- type: ContentWhitelistPreValidator
  patterns:
    - subscription[-_]?key
- type: ContentWhitelistPreValidator
  patterns:
    - \bbing\b
    - microsoft
    - azure

Examples

- text: |
    {
      "baseuri": "https://api.bing.microsoft.com/v7.0/search",
      "headers": { "Ocp-Apim-Subscription-Key": "bf7ccc0207494d5ea601f10af51ecfff" }
    }
  apikey: 'bf7ccc0207494d5ea601f10af51ecfff'
- text: |
    let cfg = {
      url: `https://api.bing.microsoft.com/v7.0/Suggestions?q=` + value,
      headers: { "Ocp-Apim-Subscription-Key": "775216a0c72d44b790058a3e62f337ef" }
    }
  apikey: '775216a0c72d44b790058a3e62f337ef'
- text: |
    $GLOBALS["subscription_key"] = "65dae5acc8508967f4f09968643e29cf";
    $request = new Http_Request2('https://api.bing.microsoft.com/v7.0/search');
  apikey: '65dae5acc8508967f4f09968643e29cf'