services / Azure / Web App functions

A function within an App Service Function App, comprising the deployed executable code/logic, its bindings/trigger configuration, and invocation keys.

Runs application logic under the function app's compute and (any attached) managed identity; supports a single organizational function.

Microsoft.​Web/​Sites/​functions/​listKeys/​action

Returns the function access keys, bearer credentials that authorize invoking the protected function endpoint.

Risks

1. Cryptographic exfiltration (CRITICAL)
2. Lateral movement (BOOST)

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links