services / Azure / Log Analytics workspace table data (ApiManagementGatewayLlmLog)

A Log Analytics workspace table queried via the data plane; this table (ApiManagementGatewayLlmLog) holds Azure API Management gateway LLM request/response logging ingested into the Azure Monitor workspace.

Monitoring/diagnostics data, but LLM gateway logs can embed captured prompt and completion content, so rows may contain genuinely sensitive application data.

Microsoft.​OperationalInsights/​workspaces/​Query/​ApiManagementGatewayLlmLog/​read

Reads APIM gateway LLM log rows that can include prompt/response payloads, so it exports both monitoring logs and potentially sensitive request/response data.

Risks

1. Data exfiltration (CRITICAL)
2. Logs exfiltration (MEDIUM)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links