ARM Templates

Useful information can be extracted from deployment history. Each resource group maintains a deployment history for up to 800 deployments. The history is automatically deleted when the count exceeds 775 deployments. Any user with permissions Microsoft.Resources/deployments/read and Microsoft.Resources/subscriptions/resourceGroups/read can read the deployment history. A deployment parameter that contains sensitive information like passwords should have 'SecureString' type. In case of a poorly written deployment template - that uses 'String' for such a parameter - we can get password in clear-text!