services / Azure / Traffic Manager nested endpoint

A Traffic Manager nested endpoint is a routing target within a Traffic Manager profile that references a child Traffic Manager profile, used to build hierarchical DNS-based traffic-routing topologies.

Nested endpoints shape the hierarchical routing of a profile's domain traffic; altering them redirects traffic for the public-facing service the profile fronts.

Microsoft.​Network/​trafficManagerProfiles/​nestedEndpoints/​delete

Deleting a nested endpoint removes a routing target so Traffic Manager stops routing traffic to the nested profile, destroying a network component and denying service to those backends.

Risks

1. Denial-of-service (HIGH)
2. Network destruction (HIGH)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links