services / Azure / Logic App workflow run action

A workflow run action represents a single executed step within a Logic App run, including links to that step's inputs and outputs.

Action inputs/outputs commonly carry the actual sensitive business data, API responses, and payloads flowing between workflow steps.

Microsoft.​Logic/​workflows/​runs/​actions/​listExpressionTraces/​action

Expression traces reveal the evaluated runtime values of an action's expressions, exposing concrete intermediate data (and potentially secrets) flowing through the workflow.

Risks

1. Data exfiltration (CRITICAL)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links