diff --git a/specification/purview/resource-manager/Microsoft.Purview/stable/2021-07-01/purview.json b/specification/purview/resource-manager/Microsoft.Purview/stable/2021-07-01/purview.json
index 64fab73535fd..0d1c5b20064f 100644
--- a/specification/purview/resource-manager/Microsoft.Purview/stable/2021-07-01/purview.json
+++ b/specification/purview/resource-manager/Microsoft.Purview/stable/2021-07-01/purview.json
@@ -1424,10 +1424,12 @@
       "type": "object",
       "properties": {
         "atlasKafkaPrimaryEndpoint": {
+          "x-ms-secret": true,
           "description": "Gets or sets the primary connection string.",
           "type": "string"
         },
         "atlasKafkaSecondaryEndpoint": {
+          "x-ms-secret": true,
           "description": "Gets or sets the secondary connection string.",
           "type": "string"
         }
diff --git a/specification/purview/resource-manager/readme.go.md b/specification/purview/resource-manager/readme.go.md
index 6387b976cd36..04b2fac24010 100644
--- a/specification/purview/resource-manager/readme.go.md
+++ b/specification/purview/resource-manager/readme.go.md
@@ -8,17 +8,6 @@ go:
   namespace: purview
   clear-output-folder: true
 ```
-## Suppression
-
-``` yaml
-directive:
-  - suppress: R3018  # EnumInsteadOfBoolean
-    where:
-      - $.definitions.CheckNameAvailabilityResult.properties.nameAvailable
-      - $.definitions.DimensionProperties.properties.toBeExportedForCustomer
-    reason:
-      - Check name model is set by ARM team https://github.com/Azure/azure-resource-manager-rpc/blob/master/v1.0/proxy-api-reference.md#check-name-availability-requests
-```
 
 ### Go multi-api
 
diff --git a/specification/purview/resource-manager/readme.md b/specification/purview/resource-manager/readme.md
index 076ce998d2fe..7f79254e00c0 100644
--- a/specification/purview/resource-manager/readme.md
+++ b/specification/purview/resource-manager/readme.md
@@ -87,3 +87,20 @@ See configuration in [readme.python.md](./readme.python.md)
 ## Go
 
 See configuration in [readme.go.md](./readme.go.md)
+
+## Suppression
+
+``` yaml
+directive:
+  - suppress: SECRET_PROPERTY
+    where:
+      - $.definitions.AccessKeys.properties.atlasKafkaPrimaryEndpoint
+      - $.definitions.AccessKeys.properties.atlasKafkaSecondaryEndpoint
+    reason: Secrets are OK to return in a POST response.
+  - suppress: R3018  # EnumInsteadOfBoolean
+    where:
+      - $.definitions.CheckNameAvailabilityResult.properties.nameAvailable
+      - $.definitions.DimensionProperties.properties.toBeExportedForCustomer
+    reason:
+      - Check name model is set by ARM team https://github.com/Azure/azure-resource-manager-rpc/blob/master/v1.0/proxy-api-reference.md#check-name-availability-requests
+```