services / Azure / Site Recovery recovery plan test failover

Performs an isolated test failover of a recovery plan, instantiating running copies of all its protected workloads into a test network without affecting production.

A test failover spins up full running copies of every workload in the plan and their data; when directed into an attacker-influenced test network it yields offline access to that data across the group outside production controls.

Microsoft.​RecoveryServices/​Vaults/​replicationRecoveryPlans/​testFailover/​action

Instantiates live copies of every workload in the plan in a chosen test network, letting an attacker access their data and reach them from network positions they control.

Risks

1. Data exfiltration (CRITICAL)
2. Lateral movement (BOOST)

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links