modern-data-warehouse-dataops
modern-data-warehouse-dataops copied to clipboard
Unstructured Data Processing deployment is outputting secrets
Description
- Storage account deployment is outputting secrets. This is raising security alerts and is not best practice due to potential leaks.
Expected Behavior
- Storage account deployment should now output secrets.
Reproduce
- Deploy sample as per instructions.
- Navigate to the storage account deployment > Outputs. This contains storage_conn_string output.
Additional Context
This line should be removed: https://github.com/Azure-Samples/modern-data-warehouse-dataops/blob/68314dbeaa8babeb57e25c71087892bd310ee166/e2e_samples/unstructured_data/infrastructure/modules/storage.bicep#L77
There are ways to retrieve secrets safe such as using the existing keyword : https://github.com/Azure/bicep/discussions/6173