Skip to content

Protect Infoblox API keys in playbooks - #14974

Merged
v-atulyadav merged 9 commits into
Azure:masterfrom
idoshabi07:ai-scan/infoblox-secure-api-key
Aug 31, 2026
Merged

Protect Infoblox API keys in playbooks#14974
v-atulyadav merged 9 commits into
Azure:masterfrom
idoshabi07:ai-scan/infoblox-secure-api-key

Conversation

@idoshabi07

@idoshabi07 idoshabi07 commented Aug 25, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Summary

  • preserves Infoblox API keys as SecureString workflow parameters
  • passes deployment secrets through properties.parameters instead of embedding them in workflow-definition defaults
  • suppresses inputs and outputs for every HTTP action that consumes the key
  • applies the protection consistently across 12 affected Infoblox playbooks

AI scan item

Validation

  • parsed all affected ARM templates as JSON
  • verified 12 secure workflow parameter bindings
  • verified secure input/output configuration on 26 HTTP actions
  • deployed the cited playbook to OptimizeSentinelResourceGroup with a unique fake key
  • confirmed the deployed resource GET did not return the fake key or runtime parameter value
  • triggered the workflow and confirmed the fake key was absent from action metadata and inaccessible through the secured input link
  • removed the test workflow and its role assignment after validation

@idoshabi07
Protect Infoblox API keys in playbooks
3d6d891 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@idoshabi07
idoshabi07 requested review from a team as code owners August 25, 2026 10:48
@v-atulyadav v-atulyadav added Playbook Playbook specialty review needed Solution Solution specialty review needed labels Aug 25, 2026
idoshabi07 and others added 2 commits August 26, 2026 15:20
@idoshabi07
Pass Infoblox secrets outside workflow definitions
48fe460 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@idoshabi07
Update Infoblox playbook entity metadata
2965e8a 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@idoshabi07

idoshabi07 commented Aug 26, 2026

Copy link
Copy Markdown
Contributor Author
image

idoshabi07 and others added 6 commits August 26, 2026 15:51
@idoshabi07
Retry PR validation
79579be 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@idoshabi07
Package Infoblox secret protection updates
9e44bac 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@idoshabi07
Retry content validation
78f41e2 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@idoshabi07
Merge remote-tracking branch 'upstream/master' into ai-scan/infoblox-…
7efefb1 
…secure-api-key
@idoshabi07
Fix Infoblox solution stream declarations
054031e 
Use literal stream declaration keys so nested solution templates do not evaluate playbook-local variables during outer ARM deployment. Rebuild the solution package with the corrected template.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 3531adfa-46ff-4a1d-9242-aaad6724a87b
@v-rusraut
Resolved arm ttk error and fixed broken link in readme file
546dbfc
@v-atulyadav
v-atulyadav merged commit 7ac37e4 into Azure:master Aug 31, 2026
33 of 34 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@v-atulyadav v-atulyadav v-atulyadav approved these changes
@v-rusraut v-rusraut v-rusraut approved these changes

Assignees

@v-rusraut v-rusraut

Labels

Playbook Playbook specialty review needed Solution Solution specialty review needed

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@idoshabi07 @v-atulyadav @v-rusraut