services / Azure / AKS AI Manager secrets

Kubernetes Secret objects within an AKS AI Manager namespace holding credential material such as tokens, passwords, TLS keys, connection strings, and service-account tokens.

Reading a Secret returns the raw secret material in plaintext, so this is a credential store of the highest sensitivity.

Microsoft.​ContainerService/​aiManagers/​secrets/​delete

Deleting secrets destroys credential/key material and breaks the workloads that mount it, causing service disruption.

Risks

1. Cryptographic destruction (CRITICAL)
2. Denial-of-service (HIGH)

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links