services / Azure / Logic App workflow access key

An access key for a Logic App workflow, used to sign callback URLs and authorize invocation of and access to workflow runs. The key is credential material.

Access keys are secret credentials scoped to a single workflow; their list/regenerate operations return secret values while the control-plane read returns only key metadata.

Microsoft.​Logic/​workflows/​accessKeys/​write

Creating or updating an access key lets an attacker plant a credential they control to sign callback URLs and persistently invoke the workflow, while altering the auth configuration.

Risks

1. Data manipulation (HIGH)
2. Account persistence (BOOST)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links