services / Azure / Load balancer backend address pool

A backend address pool is the set of target addresses (VMs, NICs, or IPs) that an Azure load balancer distributes incoming traffic to.

The backend pool determines where a load balancer forwards traffic; altering its membership can redirect client traffic to attacker-controlled targets or remove legitimate ones.

Microsoft.​Network/​loadBalancers/​backendAddressPools/​delete

Deleting the backend pool removes the set of targets the load balancer forwards to, denying service to the fronted application.

Risks

1. Denial-of-service (HIGH)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links