services / Azure / Azure SQL long-term retention backup

A long-term retention (LTR) backup of an Azure SQL database — a full, restorable point-in-time copy of the source production database's contents retained according to an LTR policy.

An LTR backup holds the complete data of a single production database; it is both a recovery asset and a full copy of sensitive organizational data, so its destruction, immutability controls, and copy operations directly affect that database's confidentiality and recoverability.

Microsoft.​Sql/​Locations/​longTermRetentionServers/​longTermRetentionDatabases/​longTermRetentionBackups/​copy/​action

Copying the LTR backup to a server/location the attacker controls replicates the full database contents, allowing later restore and read of the production data (data exfiltration).

Risks

1. Data exfiltration (CRITICAL)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links