services / Azure / Static Site database connections

A database connection resource that links an Azure Static Web App to a backend database, powering the site's Data API. It holds the target database binding, an optional managed-identity, and (retrievable separately) the connection string credential.

The connection binds a production application to its backing data tier; the show action returns reusable database credentials, making that path credential-sensitive.

Microsoft.​Web/​staticSites/​databaseConnections/​show/​action

The showDetails action returns the full unmasked connection string (and config files) embedding database credentials, a credential-export primitive redeemable for direct authenticated access to the backend database.

Risks

1. Cryptographic exfiltration (CRITICAL)
2. Lateral movement (BOOST)

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links