services / Azure / Connector Gateway Connection Access Policy

Authorization bindings on a Connector Gateway connection that govern which principals may use the credential-bearing connection to access a backend data source.

Access policies control use of a credential-bearing connection; altering them can grant unauthorized use of the connection and its backend credentials, or revoke legitimate access.

Microsoft.​Web/​connectorGateways/​connections/​accessPolicies/​action

An action on a connection access policy operates on the authorization construct governing who may use the credentialed connection, letting an attacker alter that authorization in their favor.

Risks

1. Privilege escalation (CRITICAL)
2. Data manipulation (HIGH)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links