{
  "id": "azure_cosmosdb_key",
  "name": "Azure Cosmos DB account key",
  "status": "draft",
  "doc": "Account key of Azure Cosmos DB, the AccountKey of a Cosmos DB connection string, which grants administrative access to the account. It is 88 Base64 characters ending in ==. Keys in the identifiable format carry the signature ACDb at positions 77 to 80; older keys have no signature, look like an Azure Storage account key and are not covered. The regexp follows the pattern of the Microsoft security-utilities library; Microsoft Purview describes the same key.",
  "parent": {
    "type": "symmetric_key"
  },
  "categories": [
    {
      "id": "secrets",
      "name": "Secrets and credentials (passwords, keys, tokens)"
    }
  ],
  "langs": [
    {
      "id": "common",
      "name": "Common to most languages"
    }
  ],
  "is_pii": false,
  "classification": "identifier",
  "regexp": "^[A-Za-z0-9+/]{76}ACDb[A-Za-z0-9+/]{5}[AQgw]==$",
  "mappings": {
    "purview": [
      "Azure Cosmos DB account access key"
    ]
  },
  "links": [
    {
      "type": "doc",
      "url": "https://learn.microsoft.com/en-us/purview/sit-defn-azure-cosmos-db-account-access-key"
    },
    {
      "type": "other",
      "url": "https://github.com/microsoft/security-utilities/blob/main/GeneratedRegexPatterns/PreciselyClassifiedSecurityKeys.json"
    }
  ],
  "type": "datatype",
  "examples": [],
  "translations": {}
}