services / Azure / Log Analytics workspace table (PGSQLQueryStoreQueryText)

A Log Analytics workspace query table holding captured PostgreSQL Query Store SQL statement text. Reading it is a data-plane operation returning the stored query-text rows.

Log Analytics tables are monitoring/diagnostics data stores of MEDIUM sensitivity; captured SQL text can expose schema and embed literal data values or credentials.

Microsoft.​OperationalInsights/​workspaces/​Query/​PGSQLQueryStoreQueryText/​read

Captured SQL statement text exposes database schema (table/column names) and frequently embeds literal data values and parameters, disclosing underlying database content as well as log telemetry.

Risks

1. Data exfiltration (CRITICAL)
2. Logs exfiltration (MEDIUM)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links