services / Azure / Integration Account

A Logic Apps Integration Account: a container for B2B/EDI artifacts (partners, agreements, schemas, maps, certificates) that supports enterprise integration workflows.

Supporting integration resource scoped to a single integration function; can hold certificate/key references and access keys, but is not a primary org-wide data store.

Microsoft.​Logic/​integrationAccounts/​regenerateAccessKey/​action

Regenerating the access key returns the new key secret in the response (usable credential material) while invalidating the prior key, locking out legitimate consumers.

Risks

1. Cryptographic exfiltration (CRITICAL)
2. Denial-of-access (EVASION)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links