services / Azure / Web App

An Azure App Service site (Web App, Function App, or Logic App Standard) is a managed hosting resource that runs an organization's application code, often with an attached managed identity, app settings/connection strings, and a public-facing endpoint.

Production application hosting for a single organizational function; can hold secrets in app settings, run code under a managed identity, and serve public traffic.

Microsoft.​Web/​Sites/​networktrace/​action

Capturing a network trace records the app's live network traffic, which can collect and expose sensitive in-transit data and credentials.

Risks

1. Data exfiltration (CRITICAL)
2. Automated data collection (BOOST)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links