Azure SAS URL detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_SECRET_382
Category	Secrets
Severity	HIGH
Framework	Git

Impact

A Shared Access Signature (SAS) URL that provides delegated access to resources in an Azure storage account, with specific permissions and an expiration date. Leaked SAS URLs can grant unauthorized access to read, write, or delete data in Azure storage containers and blobs, posing a direct risk to data confidentiality, integrity, and availability.

How to Fix

Revoke the Azure SAS URL immediately. Review all access logs for unauthorized activity. Generate a new credential and implement proper secret management and rotation policies.