Abusing Azure App Service Managed Identity Assignments

Intro

Azure App Service is a Platform-as-a-Service product that promises to improve web application deployment, hosting, availability, and security. Web Apps hosted by Azure App Service are organized into Azure App Service Plans, which are Virtual Machines that the Web Apps in that plan all run on. The individual Web Apps are isolated from one another by executing in their own containers on the shared Virtual Machine:

Like many AzureRM services, App Service allows you to assign Managed Identities to …

abusing app application apps app service as-a-service availability azure containers deployment hosting identity machine machines managed own plans platform platform-as-a-service product run security service services the web virtual virtual machine virtual machines web web application web apps