services / Azure / Web App hostname bindings

A hostname binding maps a custom domain (and its SSL/SNI configuration) to an Azure App Service web app, controlling how public inbound traffic is routed to the site.

Governs public-facing reachability and domain-to-app routing for a single application function.


Microsoft.​Web/​Sites/​hostnamebindings/​delete

Deleting a hostname binding removes the custom-domain endpoint that routes traffic to the web app, tearing down the public network binding and breaking inbound access (DoS) for that domain.

Risks

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links

  • https:​/​/​azure.​permissions.​cloud/​iam/​Microsoft.​Web
  • https:​/​/​learn.​microsoft.​com/​en-​us/​azure/​role-​based-​access-​control/​resource-​provider-​operations
  • Contributed by P0 Security

    © 2023–present P0 Security and contributors to the IAM Privilege Catalog