services / Azure / Azure Automation Source Control

An Azure Automation source control links the account to a Git repository (GitHub/Azure DevOps) whose code is synced into runbooks that execute under the account's identity, authenticated by a stored access token.

The stored access token (PAT/OAuth) is never returned on a normal read; the read exposes only the linkage configuration.

Microsoft.​Automation/​automationAccounts/​sourceControls/​delete

Deleting a source control removes the Git-to-runbook integration, destroying automation configuration and disrupting the runbook code-sync pipeline (the source repo and runbooks themselves are not deleted).

Risks

1. Infrastructure destruction (HIGH)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links