services / Azure / Log Analytics dedicated cluster

A dedicated Log Analytics cluster that provides customer-managed-key (CMK) backed storage for one or more linked workspaces.

A dedicated cluster stores the logs of its linked workspaces and holds their CMK association, so destroying it or changing its key affects the whole log store; HIGH.

Microsoft.​OperationalInsights/​clusters/​write

Changing the cluster's customer-managed-key association can rotate away or revoke the key protecting stored logs, rendering existing data unreadable or corrupting the encryption configuration.

Risks

1. Cryptographic destruction (CRITICAL)
2. Data manipulation (HIGH)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links