services / Azure / Web App instance processes

Instance processes are the live worker processes running the web app's workload on a given App Service instance, exposed via the Kudu/SCM process API.

Runtime process detail can include command lines and environment variables, which on App Service commonly hold connection strings and secrets.


Microsoft.​Web/​Sites/​instances/​processes/​delete

Deleting (killing) a running worker process on an app instance terminates the executing workload, disrupting service availability.

Risks

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links

  • https:​/​/​azure.​permissions.​cloud/​iam/​Microsoft.​Web
  • https:​/​/​learn.​microsoft.​com/​en-​us/​azure/​role-​based-​access-​control/​resource-​provider-​operations
  • Contributed by P0 Security

    © 2023–present P0 Security and contributors to the IAM Privilege Catalog