Azure AI services key (Azure OpenAI, Cognitive Services)
ID azure_ai_services_key
This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).
Key of an Azure AI services resource, including Azure OpenAI and the former Cognitive Services, sent in the api-key or Ocp-Apim-Subscription-Key header. Keys in the current format have 84 letters and digits with the marker JQQJ99 after the first 52 characters and a service signature ending in COG (AAAAACOG for AI services, AAABACOG for Azure OpenAI, AAAEACOG for Cognitive Services). Older keys are 32 hexadecimal digits, which look like an MD5 hash, and are not covered. The regexp follows the pattern of the Microsoft security-utilities library; Microsoft Purview describes the same key.
- Parent datatype
- API key or client secret
api_key - Categories
- Secrets and credentials (passwords, keys, tokens)
- Countries
- Global (not tied to a country)
- Languages
- Common to most languages
- Microsoft Purview
Azure Cognitive Service key- Quality
- 75/100 · missing: examples, negative example, translation
- Metacrafter rules
- no detection rule yet
- Supported by tools
- Datadog Sensitive Data Scanner, GitGuardian, GitHub secret scanning, Microsoft Purview Data Loss Prevention
Regular expression
^[A-Za-z0-9]{52}JQQJ99[A-Za-z0-9][A-L][A-Za-z0-9]{12}(?:AAAAACOG|AAABACOG|AAAEACOG)[A-Za-z0-9]{4}$Python re syntax.
Sources
- doc: https://learn.microsoft.com/en-us/purview/sit-defn-azure-cognitive-service-key
- other: https://github.com/microsoft/security-utilities/blob/main/GeneratedRegexPatterns/PreciselyClassifiedSecurityKeys.json
Use this record
- Page URL:
https://registry.apicrafter.io/datatype/azure_ai_services_key - JSON: API v1 · legacy shape (used by metacrafter) · Markdown (for LLMs)
- Improve it: edit
data/datatypes/any/secrets/azure_ai_services_key.yamlon GitHub