Azure / Azure/bicep-registry-modules
[AVM Module Issue]: Virtual Machine: make extensionDSCConfig secure
Open
Class: Resource Module :package:
Type: AVM :a: :v: :m:
- Dominant language
- Bicep
- Stars
- 736
- Forks
- 564
- Avg merge
- 3d 15h
- Merged PRs (30d)
- 30
Description
### Description
The parameter extensionDSCConfig object in the bicep-module for virtual machine is not secure. Therefore the password in the object under protectedSettings.configurationArguments.RegistrionKey.Password is not secure en will be visible when deploying.
In the module Virtual Machine the protected settings will process to the extension module and in the extension module the protectedSettings parameter is secure. But not in the module Virtual Machine.
### Module Name
avm/res/compute/virtual-machine
Contributor guide
Assessment
This issue has not been assessed yet.