services / Azure / Log Analytics workspace table (Confidential Ledger transaction logs)

A Log Analytics workspace data-plane table storing Azure Confidential Ledger transaction records. Read access returns the table's records.

Confidential Ledger transaction records are tamper-evident business records and may contain sensitive transactional data.

Microsoft.​OperationalInsights/​workspaces/​Query/​LedgerTransactionLogs/​read

Reading the table exports confidential transaction records (exfiltration:logs) that constitute sensitive business/transactional data (exfiltration:data).

Risks

1. Data exfiltration (CRITICAL)
2. Logs exfiltration (MEDIUM)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links