services / Azure / Azure SQL Database

An Azure SQL Database is a managed relational database hosted on a logical SQL server, storing production organizational data for an application or function.

Control-plane operations manage the database resource and its configuration; the row data itself is on the data plane. The asset typically backs a single production function, hence HIGH.

Microsoft.​Sql/​servers/​databases/​export/​action

Exporting the database to a bacpac produces a full copy of all stored data to a storage target, directly enabling bulk data exfiltration.

Risks

1. Data exfiltration (CRITICAL)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links