在ARM模板中以SecureExecution运行Azure自定义脚本扩展

Question

The PowerShell command Set-AzureRmVMCustomScriptExtension gives the possibility to set the parameter -SecureExecution, it allows to do not write the command who will be run in the log CustomScriptHandler. It is mandatory when you passed some credentials to your script. I would like to know if there is the same mean when I deploy a custom script extension with an ARM template. The only documented parameters are the following : "protectedSettings": { "commandToExecute": "myExecutionCommand", "storageAccountName": "myStorageAccountName", "storageAccountKey": "myStorageAccountKey" }

Answer 1

"commandToExecute" is the parameter you are looking for. it defines what gets passed to the extension.

ps. everything under protected settings gets uncrypted before execution