github.com/aquasecurity/trivy-iac@v0.8.1-0.20240127024015-3d8e412cf0ab/avd_docs/azure/compute/AVD-AZU-0037/Terraform.md (about)

     1  
     2  Don't use sensitive credentials in the VM custom_data
     3  
     4  ```hcl
     5   resource "azurerm_virtual_machine" "good_example" {
     6   	name = "good_example"
     7  	os_profile_linux_config {
     8  		disable_password_authentication = false
     9  	}
    10  	os_profile {
    11  		custom_data =<<EOF
    12  			export GREETING="Hello there"
    13  			EOF
    14  	}
    15   }
    16   
    17  ```
    18  
    19  #### Remediation Links
    20   - https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/virtual_machine#custom_data
    21