services / Azure / APIM product subscriptions

An API Management product subscription binds a user/principal to an API product and holds the gateway API keys that authorize calls to the product's published APIs.

Subscriptions are the access-grant + credential construct of the APIM gateway; the keys themselves are credentials, but the subscription entity (without keys) is access-mapping metadata.

Microsoft.​ApiManagement/​service/​workspaces/​subscriptions/​delete

Deleting a subscription revokes a legitimate consumer's authorized access to the product's APIs, denying authorized operational access.

Risks

1. Denial-of-access (EVASION)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links