Fix Credscan error (#25620)

* [Credscanfix] Hiden Client Secret (#25535)

* Hiden Client Secret

* update changelog

* update changelog

* Move ConnectedKubernetes to credscanfix (#25542)

* Move DataBox to credscanfix (#25543)

* Move Qumulo to credscanfix (#25544)

* Move DataMigration to credscanfix (#25545)

* Move Workloads to credscanfix (#25546)

* Move NetworkCloud to credscanfix (#25547)

* Move DevCenter to credscanfix (#25548)

* Credscan issue fixing part of joyer (#25552)

* Migrate Sphere from generation to credscanfix (#25541)

* Move Sphere to credscanfix

* Update ChangeLog.md

* Update ChangeLog.md

* Update ChangeLog.md

* Update required Az.Accounts version

---------

Co-authored-by: NanxiangLiu <[email protected]>
Co-authored-by: JoyerJin <[email protected]>

* [Credscanfix] Fixed secrets exposure in example documentation (#25580)

* Fixed secrets exposure in example documentation

* update ConvertTo-SecureString examples and update changelog

* Fixed secrets exposure in example documentation

* update

* update

* update

* update

* remove changelog of credscan

* remove changelog of credscan

* remove changelog of credscan

* remove general secret

---------

Co-authored-by: lijinpei2008 <[email protected]>
Co-authored-by: Azure PowerShell <[email protected]>
Co-authored-by: JoyerJin <[email protected]>

Author: 4 people

src/ADDomainServices/ADDomainServices/help/New-AzADDomainService.md

@@ -55,9 +55,9 @@ Create a new ADDomainService
 $replicaSet = New-AzADDomainServiceReplicaSet -Location westus -SubnetId /subscriptions/********-****-****-****-**********/resourceGroups/yishitest/providers/Microsoft.Network/virtualNetworks/aadds-vnet/subnets/default\
 $certificateBytes = Get-Content "certificate.pfx" -AsByteStream
 $base64String = [System.Convert]::ToBase64String($certificateBytes) 
-$ldaps_pfx_pass = "MyStrongPassword"
+$password = ConvertTo-SecureString -String "****" -AsPlainText -Force
 
-New-AzADDomainService -Name youriADdomain -ResourceGroupName youriAddomain -DomainName youriAddomain.com -ReplicaSet $replicaSet -LdapSettingLdaps Enabled -LdapSettingPfxCertificate $base64String -LdapSettingPfxCertificatePassword $($ldaps_pfx_pass | ConvertTo-SecureString -Force -AsPlainText)
+New-AzADDomainService -Name youriADdomain -ResourceGroupName youriAddomain -DomainName youriAddomain.com -ReplicaSet $replicaSet -LdapSettingLdaps Enabled -LdapSettingPfxCertificate $base64String -LdapSettingPfxCertificatePassword $password
 ```
 
 ```output

src/Accounts/Accounts/help/Connect-AzAccount.md

@@ -265,7 +265,7 @@ This example connects to an Azure account using certificate-based service princi
 The certificate file, which is specified by `CertficatePath`, should contains both certificate and private key as the input.
 
 ```powershell
-$SecurePassword = ConvertTo-SecureString -String "******" -AsPlainText -Force
+$SecurePassword = ConvertTo-SecureString -String "****" -AsPlainText -Force
 $TenantId = 'yyyyyyyy-yyyy-yyyy-yyyy-yyyyyyy'
 $ApplicationId = 'zzzzzzzz-zzzz-zzzz-zzzz-zzzzzzzz'
 Connect-AzAccount -ServicePrincipal -ApplicationId $ApplicationId -TenantId $TenantId -CertificatePath './certificatefortest.pfx' -CertificatePassword $securePassword

src/Aks/Aks/help/New-AzAksCluster.md

@@ -63,7 +63,7 @@ To create Windows Server container on an AKS, you must specify at least four fol
 `-WindowsProfileAdminUserName *** -WindowsProfileAdminUserPassword *** -NetworkPlugin azure -NodeVmSetType VirtualMachineScaleSets`
 
 ```powershell
-$cred = ConvertTo-SecureString -AsPlainText "Password!!123" -Force
+$cred = ConvertTo-SecureString -String "****" -AsPlainText -Force
 New-AzAksCluster -ResourceGroupName myResourceGroup -Name myCluster -WindowsProfileAdminUserName azureuser -WindowsProfileAdminUserPassword $cred -NetworkPlugin azure -NodeVmSetType VirtualMachineScaleSets
 New-AzAksNodePool -ResourceGroupName myResourceGroup -ClusterName myCluster -Name win1 -OsType Windows -VmSetType VirtualMachineScaleSets
 ```

src/Aks/Aks/help/New-AzAksNodePool.md

@@ -52,7 +52,7 @@ New-AzAksNodePool -ResourceGroupName myResouceGroup -ClusterName myCluster -Name
 
 ### Example 2: Create Windows Server container on an AKS
 ```powershell
-$cred = ConvertTo-SecureString -AsPlainText "Password!!123" -Force
+$cred = ConvertTo-SecureString -String "****" -AsPlainText -Force
 New-AzAksCluster -ResourceGroupName myResourceGroup -Name myCluster -WindowsProfileAdminUserName azureuser -WindowsProfileAdminUserPassword $cred -NetworkPlugin azure -NodeVmSetType VirtualMachineScaleSets
 New-AzAksNodePool -ResourceGroupName myResourceGroup -ClusterName myCluster -Name win1 -OsType Windows -VmSetType VirtualMachineScaleSets
 ```

src/Aks/Aks/help/Set-AzAksClusterCredential.md

@@ -41,7 +41,7 @@ Reset the ServicePrincipal of an existing AKS cluster.
 
 ### Example 1
 ```powershell
-$SecPasswd = ConvertTo-SecureString $password -AsPlainText -Force
+$SecPasswd = ConvertTo-SecureString -String "****" -AsPlainText -Force
 $Credential = $(New-Object System.Management.Automation.PSCredential ('6f277dd3-e481-4518-8aab-35c31662bad9', $SecPasswd))
 Set-AzAksClusterCredential -ResourceGroupName $ResourceGroupName -Name $Name -ServicePrincipalIdAndSecret $Credential -force
 ```

src/ApiManagement/ApiManagement/help/New-AzApiManagementBackendProxy.md

@@ -24,7 +24,7 @@ Creates a new Backend Proxy Object which can be piped when creating a new Backen
 
 ### Example 1: Create a Backend Proxy In-Memory Object
 ```powershell
-$secpassword = ConvertTo-SecureString "PlainTextPassword" -AsPlainText -Force
+$secpassword = ConvertTo-SecureString -String "****" -AsPlainText -Force
 $proxyCreds = New-Object System.Management.Automation.PSCredential ("foo", $secpassword)
 $credential = New-AzApiManagementBackendProxy -Url "http://12.168.1.1:8080" -ProxyCredential $proxyCreds
 

src/ApiManagement/ApiManagement/help/New-AzApiManagementUser.md

@@ -27,7 +27,7 @@ The **New-AzApiManagementUser** cmdlet registers a new user.
 ### Example 1: Register a new user
 ```powershell
 $apimContext = New-AzApiManagementContext -ResourceGroupName "Api-Default-WestUS" -ServiceName "contoso"
-$securePassword = ConvertTo-SecureString "qwerty" -AsPlainText -Force
+$securePassword = ConvertTo-SecureString -String "****" -AsPlainText -Force
 New-AzApiManagementUser -Context $apimContext -FirstName "Patti" -LastName "Fuller" -Email "[email protected]" -Password $securePassword
 ```
 

src/ApiManagement/ApiManagement/help/Set-AzApiManagementOpenIdConnectProvider.md

@@ -28,7 +28,7 @@ The **Set-AzApiManagementOpenIdConnectProvider** cmdlet modifies an OpenID Conne
 ### Example 1: Change the client secret for a provider
 ```powershell
 $apimContext = New-AzApiManagementContext -ResourceGroupName "Api-Default-WestUS" -ServiceName "contoso"
-Set-AzApiManagementOpenIdConnectProvider -Context $apimContext -OpenIdConnectProviderId "OICProvider01" -ClientSecret "q2w3e43r45" -PassThru
+Set-AzApiManagementOpenIdConnectProvider -Context $apimContext -OpenIdConnectProviderId "OICProvider01" -ClientSecret <ClientSecret> -PassThru
 ```
 
 This command modifies the provider that has the ID OICProvider01.
@@ -40,7 +40,7 @@ Modifies an OpenID Connect provider. (autogenerated)
 
 <!-- Aladdin Generated Example -->
 ```powershell
-Set-AzApiManagementOpenIdConnectProvider -ClientId 'clientid' -ClientSecret 'q2w3e43r45' -Context <PsApiManagementContext> -OpenIdConnectProviderId 'OICProvider01' -PassThru
+Set-AzApiManagementOpenIdConnectProvider -ClientId 'clientid' -ClientSecret <ClientSecret> -Context <PsApiManagementContext> -OpenIdConnectProviderId 'OICProvider01' -PassThru
 ```
 
 ## PARAMETERS

src/ApiManagement/ApiManagement/help/Set-AzApiManagementUser.md

@@ -28,7 +28,7 @@ The **Set-AzApiManagementUser** cmdlet sets user details.
 ### Example 1: Change a user's password, email address and state
 ```powershell
 $apimContext = New-AzApiManagementContext -ResourceGroupName "Api-Default-WestUS" -ServiceName "contoso"
-$securePassword = ConvertTo-SecureString "qwerty" -AsPlainText -Force
+$securePassword = ConvertTo-SecureString -String "****" -AsPlainText -Force
 Set-AzApiManagementUser -Context $apimContext -UserId "0123456789" -Email "[email protected]" -Password $securePassword -State "Blocked"
 ```
 

src/App/App/help/New-AzContainerApp.md

@@ -67,7 +67,7 @@ $EnvId = (Get-AzContainerAppManagedEnv -ResourceGroupName azps_test_group_app -N
 
 New-SelfSignedCertificate -DnsName "www.fabrikam.com", "www.contoso.com" -CertStoreLocation "cert:\LocalMachine\My"
 Get-ChildItem -Path cert:\LocalMachine\My
-$mypwd = ConvertTo-SecureString -String "1234" -Force -AsPlainText
+$mypwd = ConvertTo-SecureString -String "****" -AsPlainText -Force
 Get-ChildItem -Path cert:\localMachine\my\F61C9A8C53D0500F819463A66C5921AA09E1B787 | Export-PfxCertificate -FilePath C:\mypfx.pfx -Password $mypwd
 New-AzContainerAppManagedEnvCert -EnvName azps-env -Name azps-env-cert -ResourceGroupName azps_test_group_app -Location eastus -InputFile "C:\mypfx.pfx" -Password $mypwd
 
@@ -104,7 +104,7 @@ $EnvId = (Get-AzContainerAppConnectedEnv -ResourceGroupName azps_test_group_app
 
 New-SelfSignedCertificate -DnsName "www.fabrikam.com", "www.contoso.com" -CertStoreLocation "cert:\LocalMachine\My"
 Get-ChildItem -Path cert:\LocalMachine\My
-$mypwd = ConvertTo-SecureString -String "1234" -Force -AsPlainText
+$mypwd = ConvertTo-SecureString -String "****" -AsPlainText -Force
 Get-ChildItem -Path cert:\localMachine\my\F61C9A8C53D0500F819463A66C5921AA09E1B787 | Export-PfxCertificate -FilePath C:\mypfx.pfx -Password $mypwd
 New-AzContainerAppConnectedEnvCert -Name azps-connectedenvcert -ConnectedEnvironmentName azps-connectedenv -ResourceGroupName azps_test_group_app -Location eastus -InputFile "C:\mypfx.pfx" -Password $mypwd