services / Azure / Azure Automation job stream

An Azure Automation job stream holds the detailed per-record output of a runbook job execution (output, verbose, error, warning, debug, and progress streams).

Streams frequently capture intermediate data and values surfaced during runbook execution and are a common place where sensitive data and secrets are inadvertently logged.

Microsoft.​Automation/​automationAccounts/​jobs/​streams/​read

Reads job stream records (output/verbose/error/debug), which frequently expose intermediate sensitive data and occasionally credentials logged during runbook execution.

Risks

1. Data exfiltration (CRITICAL)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links