services / Azure / Storage account object replication policy

An object replication policy configuring asynchronous cross-account replication of blob data between a source and destination storage account.

A data-protection/redundancy mechanism; the policy itself holds no data.


Microsoft.​Storage/​storageAccounts/​objectReplicationPolicies/​delete

Deleting the policy halts cross-account blob replication, disrupting the configured data-protection/redundancy pipeline by altering operational replication state.

Risks

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links

  • https:​/​/​azure.​permissions.​cloud/​iam/​Microsoft.​Storage
  • https:​/​/​learn.​microsoft.​com/​en-​us/​azure/​role-​based-​access-​control/​resource-​provider-​operations
  • Contributed by P0 Security

    © 2023–present P0 Security and contributors to the IAM Privilege Catalog