{
  "id": "azure_cosmosdb_key",
  "kind": "datatype",
  "status": "draft",
  "name": "Azure Cosmos DB account key",
  "doc": "Account key of Azure Cosmos DB, the AccountKey of a Cosmos DB connection string, which grants administrative access to the account. It is 88 Base64 characters ending in ==. Keys in the identifiable format carry the signature ACDb at positions 77 to 80; older keys have no signature, look like an Azure Storage account key and are not covered. The regexp follows the pattern of the Microsoft security-utilities library; Microsoft Purview describes the same key.",
  "parent": "symmetric_key",
  "is_pii": false,
  "categories": [
    "secrets"
  ],
  "langs": [
    "common"
  ],
  "classification": "identifier",
  "regexp": "^[A-Za-z0-9+/]{76}ACDb[A-Za-z0-9+/]{5}[AQgw]==$",
  "mappings": {
    "purview": [
      "Azure Cosmos DB account access key"
    ]
  },
  "links": [
    {
      "type": "doc",
      "url": "https://learn.microsoft.com/en-us/purview/sit-defn-azure-cosmos-db-account-access-key"
    },
    {
      "type": "other",
      "url": "https://github.com/microsoft/security-utilities/blob/main/GeneratedRegexPatterns/PreciselyClassifiedSecurityKeys.json"
    }
  ],
  "detected_by": {
    "tools": [
      "datadogsds",
      "gitguardian",
      "githubsecretscanning",
      "microsoftpurview"
    ]
  },
  "quality": {
    "score": 75,
    "missing": [
      "examples",
      "negative example",
      "translation"
    ]
  },
  "source": {
    "path": "data/datatypes/any/secrets/azure_cosmosdb_key.yaml",
    "url": "https://github.com/apicrafter/metacrafter-registry/blob/main/data/datatypes/any/secrets/azure_cosmosdb_key.yaml",
    "edit_url": "https://github.com/apicrafter/metacrafter-registry/edit/main/data/datatypes/any/secrets/azure_cosmosdb_key.yaml"
  },
  "urls": {
    "html": "https://registry.apicrafter.io/datatype/azure_cosmosdb_key",
    "json": "https://registry.apicrafter.io/api/v1/datatypes/azure_cosmosdb_key.json"
  }
}