services / Azure / Azure Automation Webhook

An Azure Automation webhook is a token-bearing HTTP trigger that invokes a runbook, which then executes under the Automation account's managed/Run As identity.

The secret token-bearing invocation URI is returned only at creation, never on read.

Microsoft.​Automation/​automationAccounts/​webhooks/​delete

Deleting a webhook removes the runbook trigger integration, destroying automation configuration and disrupting any workflow that depends on it.

Risks

1. Infrastructure destruction (HIGH)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links