services / Azure / Site Recovery replication fabric

An Azure Site Recovery replication fabric represents a source or target location (Azure region, VMM/Hyper-V site, or on-premises environment) that hosts the replication topology and process/gateway servers linking protected workloads to their disaster-recovery copies.

The fabric is the root of the replication topology; deleting it cascades to every protection container and protected item it hosts, so its loss defeats disaster recovery for all workloads replicating through it.

Microsoft.​RecoveryServices/​Vaults/​replicationFabrics/​delete

Deleting a fabric tears down the replication topology and cascades to all contained protection containers and protected items, destroying disaster-recovery capability for those workloads; a common ransomware precursor.

Risks

1. Denial-of-service (HIGH)
2. Infrastructure destruction (HIGH)
3. Defense destruction (EVASION)

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links