services / Azure / Static Site build database connections

A database connection resource that links a Static Web App build (e.g. a preview/staging environment) to a backend database, powering that build's Data API. It holds the target database binding, an optional managed-identity, and (retrievable separately) the connection string credential.

The connection binds a build environment to its backing data tier; the show action returns reusable database credentials, making that path credential-sensitive.

Microsoft.​Web/​staticSites/​builds/​databaseConnections/​show/​action

The build-scoped showDetails action returns the full unmasked connection string and config files containing database credentials, exporting reusable secret material for direct authenticated access to the backend database.

Risks

1. Cryptographic exfiltration (CRITICAL)
2. Lateral movement (BOOST)

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links