Managed Identity Attack Paths, Part 2: Logic Apps

Intro and Prior Work

In this three part blog series we are exploring attack paths that emerge out of Managed Identity assignments in three Azure services: Automation Accounts, Logic Apps, and Function Apps.

In part 1 we looked at how attack paths emerge out of Automation Account configurations. In part 2 we are looking at Logic Apps.

Managed Identity assignments are an extremely effective security control that prevent the accidental exposure of credentials by removing this requirement to store or …

apps attack azure bloodhound bloodhound-enterprise cloud security cybersecurity devops identity logic managed