Resource hijacking
Attackers may leverage the compute, network, or storage resources of the application for unauthorized purposes, such as cryptocurrency mining, mass scanning, or traffic proxying.
Mitigations
| ID | Mitigation | Description |
|---|---|---|
| MS-M7037 | Restrict outbound network access | Limit outbound traffic from applications and functions to explicitly approved domains or IP ranges to prevent misuse. |
| MS-M7045 | Use compute reservations | Limit scaling behavior with autoscaling limits. |
| MS-M7044 | Implement resource quotas and concurrency limits | Set maximum CPU, memory, execution time, and concurrency limits on serverless functions and applications. |