services / Azure / Azure VPN gateway

A VpnGateway is an Azure Virtual WAN site-to-site VPN gateway resource that provides cross-premises/hybrid network connectivity, including VPN connections, BGP routing, and IP configuration.

Production network connectivity infrastructure for a single organizational function (hybrid/site-to-site connectivity); compromise can extend reach into peered/on-prem networks or sever connectivity.

Microsoft.​Network/​vpnGateways/​startpacketcapture/​action

Starting packet capture records live traffic traversing the VPN tunnels, enabling automated collection and later exfiltration of potentially sensitive in-transit data.

Risks

1. Data exfiltration (CRITICAL)
2. Automated data collection (BOOST)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links