services / Azure / Storage Queue Service Messages

Queue messages are the individual data payloads (work items) enqueued in a storage queue for asynchronous processing by downstream consumers.

Message payloads may contain sensitive operational data, identifiers, or commands that drive downstream automation.

Microsoft.​Storage/​storageAccounts/​queueServices/​queues/​messages/​process/​action

Processing (dequeue: get with visibility timeout then delete) both returns the message contents and removes it from the queue, enabling exfiltration and destruction of queued data.

Risks

1. Data destruction (CRITICAL)
2. Data exfiltration (CRITICAL)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links