Latest Breaking News On - Dangerous privileges granted to service principals - Page 1 : comparemela.com

Intro and Prior WorkIn this three part blog series we are exploring attack paths that emerge out of Managed Identity assignments in three Azure services: Automation Accounts, Logic Apps, and Function Apps.In part 1 we looked at how attack paths emerge out of Automation Account configurations. In part 2 we are looking at Logic Apps.Managed Identity assignments are an extremely effective security control that prevent the accidental exposure of credentials by removing this requirement to store or use credentials in the first place. Instead of storing and sending credentials, Azure knows that your script is allowed to authenticate as a specific Service Principal.You should absolutely be using Managed Identity assignments in Azure instead of storing or accessing credentials.But Managed Identities introduce a new problem: they can quickly create identity-based attack paths in Azure that may lead to escalation of privilege opportunities. In this series we will explore how those attack path

Randy robbinsSecurity bloggers networkDangerous privileges granted to service principalsService principalsCompany administratorService principal or logic appService principal global adminSpecterops team members on mediumService principalA service principalSpecterops team membersManaged identityAutomation accountsLogic appsAutomation accountManaged identities