Cloud native terminal
Some cloud platforms provide built-in administrative consoles or SSH-style terminals for running commands directly inside the application's execution environment. Attackers who gain access to the terminal will be able to extract data, edit the web app files and execute commands.
For example, Azure App Services expose a Kudu console that acts as a built-in terminal; if attackers obtain deployment credentials, they can use it to browse files, execute commands, and tamper with application code.
Mitigations
| ID | Mitigation | Description |
|---|---|---|
| MS-M7017 | Implement least-privilege access | Restrict permissions to access cloud-native terminals (Kudu, Systems Manager, Cloud Shell) to only authorized administrators. |
| MS-M7011 | Disable basic authentication | Turn off username/password authentication where possible. |
| MS-M7012 | Enforce multi-factor authentication (MFA) | Require MFA for all access to administrative shell and console features. |