az login --password-file

[kingces95]

Related command
az login

Is your feature request related to a problem? Please describe.
As a bash user logging script output I do not want to inadvertently capture a secret in my logs. To use az login with a password I need to pass the password as an argument. This forces me to load the password into a shell variable which increases the likelihood the password will be captured in a log.

Describe the solution you'd like
I'd like az login to support an option --password-file which can be used instead of --password. The value will be a path to a file from which the password can be read.

[yonzhan]

@jiasli for awareness

[jiasli]

I understand your concern. Another possible approach is to use environment variables: #10241

[kingces95]

@jiasli, putting the secret in a script or environment variable is what I'd like to avoid as it's more likely to end up in a log if, say, I dump the environment to a log while debugging.

[jiasli]

@kingces95, fully understood. I have made this PR a feature request and will certainly discuss with our PM @chasewilson @Jacekey23.

[pingtouskar]

@jiasli Any progress on this fetaure ? This a must have for enterprise to use the azure-cli without compromizing the creds.