services / Azure / APIM developer portal config

Configuration of the API Management developer portal (a public-facing site), including sign-in/sign-up, delegation, CORS, and CSP settings.

The developer portal is an externally visible asset; its config controls public access and delegated-authentication behavior.

Microsoft.​ApiManagement/​service/​portalConfigs/​listMediaContentSecrets/​action

Returns the media content blob container URI including its SAS token, credential material granting direct out-of-band read/write access to the portal's backing storage container.

Risks

1. Cryptographic exfiltration (CRITICAL)

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links