services / Azure / Virtual Machines

An Azure virtual machine: a production compute resource running an OS, applications, attached disks, network interfaces, and optionally a managed identity.

A VM typically supports a single organizational function; control-plane and data-plane access to it can expose on-disk data, attached managed-identity credentials, and the hosted service's availability.

Microsoft.​Compute/​virtualMachines/​deallocate/​action

Powers off the VM and releases its compute resources, interrupting whatever organizational function it served. Ephemeral OS/temp disk contents and dynamic public IPs are lost on deallocation.

Risks

1. Denial-of-service (HIGH)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links