services / Azure / Front Door

Azure Front Door (classic) is a global edge/CDN application-delivery service that manages public-facing routing rules, frontend endpoints/custom domains, and backend pools.

A public-facing edge/routing layer; write access can hijack or deface traffic for the fronted application.

Microsoft.​Network/​frontDoors/​delete

Deleting a Front Door removes the global edge/routing/CDN front-end, tearing down a network component and causing denial of service for the fronted public application.

Risks

1. Denial-of-service (HIGH)
2. Network destruction (HIGH)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links