CloudAzure

Azure CLI Authentication Artifacts

Azure CLI profile and token artifacts can contain authentication state and cloud account metadata.

Metadata

  • id: cloud.azure.cli-auth
  • category: cloud
  • sensitivity: high
  • subcategory: azure
  • artifact types: credential, configuration
  • tags: azure, cloud

Path Matchers

PathKindPlatforms
%USERPROFILE%\.azure\directorywindows
$HOME/.azure/directorylinux, macos

Content Indicators

Literal strings:

  • accessToken
  • refreshToken

Credential Types

  • access-token
  • refresh-token

Impact

  • cloud_access
  • credential_access

References

On this page