Data destruction
Attackers who gain sufficient privileges within a cloud web application may delete or corrupt data stored in the app or in connected cloud resources such as databases and storage.
Mitigations
| ID | Mitigation | Description |
|---|---|---|
| MS-M7040 | Restrict delete and write permissions | Limit who can delete or modify data in storage accounts, databases, and other repositories. |
| MS-M7034 | Enable versioning and recovery mechanisms | Use versioning, soft delete, or recycle bins to allow recovery of deleted or modified data. |
| MS-M7041 | Implement backup and recovery plans | Regularly back up critical data to separate, protected locations and test restoration procedures. |