services / Azure / Network Profile

A Network Profile defines container networking configuration (container network interfaces and their subnet/IP settings) used to attach container workloads to a VNet.

Controls how container workloads are wired into the VNet; manipulation can place attacker workloads on the network or reattach existing ones into different segments.

Microsoft.​Network/​networkProfiles/​setContainers/​action

Attaches container groups to the profile's network configuration, placing container workloads into a chosen VNet segment and thereby gaining network reach; setNetworkInterfaces is an equivalent attach operation at the NIC level carrying the same risk.

Risks

1. Data manipulation (HIGH)
2. Network movement (BOOST)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links