services / Azure / Network Interface effective network security groups

Returns the effective network security groups (NSGs) applied to a network interface, merging subnet- and NIC-level associations.

Read-only reconnaissance of security posture; scoped down from the base HIGH rating since it discloses security-group metadata rather than enabling traffic manipulation.

Microsoft.​Network/​networkInterfaces/​effectiveNetworkSecurityGroups/​action

Reveals the live effective NSG rules protecting the VM's network path, exposing which ports/protocols are open and aiding planning of a network-based attack.

Risks

1. Network discovery (LOW)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links