modern-data-warehouse-dataops icon indicating copy to clipboard operation
modern-data-warehouse-dataops copied to clipboard

Unstructured Data Processing deployment is outputting secrets

Open devlace opened this issue 9 months ago • 0 comments

Description

  • Storage account deployment is outputting secrets. This is raising security alerts and is not best practice due to potential leaks.

Expected Behavior

  • Storage account deployment should now output secrets.

Reproduce

  1. Deploy sample as per instructions.
  2. Navigate to the storage account deployment > Outputs. This contains storage_conn_string output.

Additional Context

This line should be removed: https://github.com/Azure-Samples/modern-data-warehouse-dataops/blob/68314dbeaa8babeb57e25c71087892bd310ee166/e2e_samples/unstructured_data/infrastructure/modules/storage.bicep#L77

There are ways to retrieve secrets safe such as using the existing keyword : https://github.com/Azure/bicep/discussions/6173

devlace avatar May 13 '25 04:05 devlace