> For the complete documentation index, see [llms.txt](https://notes.incendium.rocks/pentesting-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.incendium.rocks/pentesting-notes/cloud/azure/privilege-escalation/arm-deployment-history.md).

# ARM Deployment History

When a identity has the permissions `Microsoft.Resources/deployments/read` and `Microsoft.Resources/subscriptions/resourceGroups/read`, it can read the deployment history.

### Deployment history

Each resource group maintains a deployment history for up to 800 deployments. They are a a rich resource of information. It can contain sensitive information like passwords "String" type. 

<figure><img src="/files/Iem0Iy3ucgsGH7qMphsY" alt=""><figcaption></figcaption></figure>

{% hint style="info" %}
There are no logs for reading these templates
{% endhint %}

### Common scenario

A inline command that is being executed:

<figure><img src="/files/elf8VlhCJeAT7E4eUEso" alt=""><figcaption></figcaption></figure>