services / Azure / Log Analytics workspace table (AppEnvSessionConsoleLogs)

A single named table within an Azure Log Analytics (Operational Insights) workspace, queried via the data plane. This table captures Azure Container Apps dynamic-session console (stdout/stderr) output.

Console output of running application sessions frequently contains command results, secrets, tokens, or PII printed to the console, making this table prone to holding sensitive data.

Microsoft.​OperationalInsights/​workspaces/​Query/​AppEnvSessionConsoleLogs/​read

Reading this table exports Container Apps session console output, which commonly contains application data, secrets, or command results, enabling sensitive data exfiltration beyond ordinary telemetry.

Risks

1. Data exfiltration (CRITICAL)
2. Logs exfiltration (MEDIUM)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links