Metacrafter Registry

Datatypes

Azure Cosmos DB account key

ID azure_cosmosdb_key

DatatypeNot PIIidentifierDraft

This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).

Account key of Azure Cosmos DB, the AccountKey of a Cosmos DB connection string, which grants administrative access to the account. It is 88 Base64 characters ending in ==. Keys in the identifiable format carry the signature ACDb at positions 77 to 80; older keys have no signature, look like an Azure Storage account key and are not covered. The regexp follows the pattern of the Microsoft security-utilities library; Microsoft Purview describes the same key.

Parent datatype
Symmetric secret key symmetric_key
Categories
Secrets and credentials (passwords, keys, tokens)
Countries
Global (not tied to a country)
Languages
Common to most languages
Microsoft Purview
Azure Cosmos DB account access key
Quality
75/100 · missing: examples, negative example, translation
Metacrafter rules
no detection rule yet
Supported by tools
Datadog Sensitive Data Scanner, GitGuardian, GitHub secret scanning, Microsoft Purview Data Loss Prevention

Regular expression

^[A-Za-z0-9+/]{76}ACDb[A-Za-z0-9+/]{5}[AQgw]==$

Python re syntax.

Sources

Use this record