services / Azure / Web App hostname bindings
A hostname binding maps a custom domain (and its SSL/SNI configuration) to an Azure App Service web app, controlling how public inbound traffic is routed to the site.
Governs public-facing reachability and domain-to-app routing for a single application function.
Microsoft.Web/Sites/hostnamebindings/delete
Deleting a hostname binding removes the custom-domain endpoint that routes traffic to the web app, tearing down the public network binding and breaking inbound access (DoS) for that domain.
Risks
Scope: HIGH
This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.
Links
Contributed by P0 Security
© 2023–present P0 Security and contributors to the IAM Privilege Catalog