Workspace.get method unintentionally exposes subscription id when Workspace is not found.

[Bhanurdra]

Package Name & Version:
azureml-core==1.31.0
Operating System: Windows
Python Version: 3.8.0

Describe the bug
The get_workspace method under _commands.py module exposes the users' subscription id when the user tries to validate whether the particular ML Workspace exists under the given resource or not.
This issue is reproducible in Github Action as well.

To Reproduce
Steps to reproduce the behavior:

1. Create an account in https://portal.azure.com/
2. Create only a resource group in Azure .
3. Run following to get the Service Principal details: az ad sp create-for-rbac --name {name} --role contributor --scopes /subscriptions/{subscription id}/resourceGroups/test --sdk-auth
4. Run the following code to check whether the ML Workspace exists under the resource group created in step 2

from azureml.core import Workspace
from azureml.core.authentication import ServicePrincipalAuthentication
from azureml.exceptions import ProjectSystemException

auth = ServicePrincipalAuthentication(tenant_id="3XXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX",
                                      service_principal_id="9XXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX",
                                      service_principal_password="XXX_XXXXXXXXXXXXXX_XXXXX~XX~XXXXXX",
                                      cloud='AzureCloud')
try:
    work_space = Workspace.get(auth=auth,
                               subscription_id="3XXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX",
                               resource_group="test",
                               name="test-github",
                               location="eastus2",
                               cloud="AzureCloud")
except ProjectSystemException as exception:
    print(f"Error: {exception}")

Expected behavior
I have created resource group named "test".
Since ML Workspace isn't created using above mentioned steps, it is expected to be throwing ProjectSystemException error alone.

Actual behavior
It throws ProjectSystemException error along with get_workspace method error exposing the subscription id. Please refer the screenshot below.

Screenshots
From local system

From Github Action Log

Let me know if any additional details are required from my end.

Thanks
Bhanu

[ghost]

Thanks for the feedback! We are routing this to the appropriate team for follow-up. cc @azureml-github.

Issue Details

---

Package Name & Version:
azureml-core==1.31.0
Operating System: Windows
Python Version: 3.8.0

Describe the bug
The get_workspace method under _commands.py module exposes the users' subscription id when the user tries to validate whether the particular ML Workspace exists under the given resource or not.
This issue is reproducible in Github Action as well.

To Reproduce
Steps to reproduce the behavior:

1. Create an account in https://portal.azure.com/
2. Create only a resource group in Azure .
3. Run following to get the Service Principal details: az ad sp create-for-rbac --name {name} --role contributor --scopes /subscriptions/{subscription id}/resourceGroups/test --sdk-auth
4. Run the following code to check whether the ML Workspace exists under the resource group created in step 2

from azureml.core import Workspace
from azureml.core.authentication import ServicePrincipalAuthentication
from azureml.exceptions import ProjectSystemException

auth = ServicePrincipalAuthentication(tenant_id="3XXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX",
                                      service_principal_id="9XXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX",
                                      service_principal_password="XXX_XXXXXXXXXXXXXX_XXXXX~XX~XXXXXX",
                                      cloud='AzureCloud')
try:
    work_space = Workspace.get(auth=auth,
                               subscription_id="3XXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX",
                               resource_group="test",
                               name="test-github",
                               location="eastus2",
                               cloud="AzureCloud")
except ProjectSystemException as exception:
    print(f"Error: {exception}")

Expected behavior
I have created resource group named "test".
Since ML Workspace isn't created using above mentioned steps, it is expected to be throwing ProjectSystemException error alone.

Actual behavior
It throws ProjectSystemException error along with get_workspace method error exposing the subscription id. Please refer the screenshot below.

Screenshots
From local system

From Github Action Log

Let me know if any additional details are required from my end.

Thanks
Bhanu

Author:	Bhanurdra
Assignees:	-
Labels:	ML-CoreUI, Machine Learning, Service Attention, customer-reported, question
Milestone:	-

[Karishma-Tiwari-MSFT]

@v-strudm-msft Is this issue being addressed? Thanks.

[luigiw]

Closing legacy issue.

Please consider upgrading to AzureML v2 CLI/SDK. https://learn.microsoft.com/en-us/azure/machine-learning/concept-v2