LoFP LoFP / azure_ai_foundry

azure_ai_foundry rule

TitleTags
a prompt that contains both an email address and a sentence such as \"the password is required\" matches the password assignment pattern. read the message and drop test subscriptions that intentionally send fake secrets.
a shared subscription key behind one nat can combine refusals from unrelated users. raise the threshold or split keys per application if that subscription is noisy.
a subscription key used from a vpn, a cloud vm, or a corporate proxy whose egress geo is far from the developer's network. a home isp and a cloud build agent on the same key look like impossible travel.
approved batch jobs, evaluation harnesses, and user-facing apps that fan out from one nat. exclude that caller ip prefix and deployment, or raise the thresholds to sit above the normal 9-minute peak.
approved prompt-security tests that send known jailbreak strings, such as dan or \"ignore previous instructions\". exclude that source ip or api management subscription.
documentation and unit tests that paste example keys, such as an aws access key ending in example, match the token patterns. confirm the value is live before rotating it.
foundry masks the last octet of caller_ip_address, so unrelated users behind the same network prefix are counted together.
one shared subscription key in front of users in different countries. split that key per application, or raise the distance and speed thresholds in the query.
red-team or application tests that intentionally send prompts the model refuses. exclude that source ip or api management subscription.