Managed Identity Attack Paths, Part 3: Function Apps

Intro and Prior Work

In this three part blog series we have explored attack paths that emerge out of Managed Identity assignments in three Azure services: Automation Accounts, Logic Apps, and Function Apps.

In Part 1 we looked at attack paths that emerge out of Automation Account Managed Identity Assignments and Run As configurations. In Part 2 we looked at Logic Apps. Now in Part 3 we are looking at Function Apps.

Managed Identity assignments are an extremely effective security …

apps attack azure bloodhound bloodhound-enterprise cloud security cybersecurity devops identity managed