services / Azure / Logic App workflow access key

An access key for a Logic App workflow, used to sign callback URLs and authorize invocation of and access to workflow runs. The key is credential material.

Access keys are secret credentials scoped to a single workflow; their list/regenerate operations return secret values while the control-plane read returns only key metadata.

Microsoft.​Logic/​workflows/​accessKeys/​regenerate/​action

Regenerating returns new secret key material to the attacker while simultaneously invalidating the existing key, denying access to legitimate callers using the prior secret.

Risks

1. Cryptographic exfiltration (CRITICAL)
2. Denial-of-access (EVASION)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links