Skip to content

AZT701 - SAS URI Generation#

By generating an SAS URI for a resource, an adversary may extract the contents of that resource without authentication at any time.

ID Name Description Action Resources
AZT701.1 VM Disk SAS URI An adversary may create an SAS URI to download a VM disk attached to a virtual machine. Microsoft.Compute/disks/beginGetAccess/action Virtual Machine Disk
AZT701.2 Storage Account File Share SAS By generating a Shared Access Signature (SAS) URI, an adversary can access a container in a Storage Account at any time. Microsoft.Storage/storageAccounts/listAccountSas/action Azure Storage Account