services / Azure / Application Insights API key

An Application Insights component is the Azure Monitor resource that ingests, stores, and retains application telemetry (requests, traces, exceptions, dependencies, metrics).

Monitoring/diagnostics asset whose data underpins detection and incident response.

Microsoft.​Insights/​Components/​ApiKeys/​Read

Reading the API key resource is treated as returning usable credential material that grants programmatic telemetry/query access under an alternate identity; an attacker holding this can read the component's data plane out-of-band.

Risks

1. Cryptographic exfiltration (CRITICAL)
2. Lateral movement (BOOST)

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links