services / Azure / Network Interface Tap Configuration Proxy

A Network Interface Tap Configuration Proxy represents, from the Virtual Network TAP side, the association binding network interfaces to the tap so their traffic is mirrored to a collector.

The proxy view of traffic-mirroring associations; managing it controls which NICs' in-transit traffic is intercepted to the tap.

Microsoft.​Network/​virtualNetworkTaps/​networkInterfaceTapConfigurationProxies/​write

Creating or updating the proxy attaches NIC traffic mirroring to the virtual network tap, enabling continuous, automated collection and exfiltration of mirrored in-transit traffic.

Risks

1. Data exfiltration (CRITICAL)
2. Automated data collection (BOOST)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links