services / Azure / Network Interface Tap Configuration Proxy

A Network Interface Tap Configuration Proxy represents, from the Virtual Network TAP side, the association binding network interfaces to the tap so their traffic is mirrored to a collector.

The proxy view of traffic-mirroring associations; managing it controls which NICs' in-transit traffic is intercepted to the tap.


Microsoft.​Network/​virtualNetworkTaps/​networkInterfaceTapConfigurationProxies/​delete

Deleting the proxy removes the traffic-mirroring association from the virtual network tap, a network-component deletion that can also disrupt legitimate monitoring feeds.

Risks

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links

  • https:​/​/​azure.​permissions.​cloud/​iam/​Microsoft.​Network
  • https:​/​/​learn.​microsoft.​com/​en-​us/​azure/​role-​based-​access-​control/​resource-​provider-​operations
  • Contributed by P0 Security

    © 2023–present P0 Security and contributors to the IAM Privilege Catalog