Some Azure services have an additional, not widely known, protection mechanism against session token exfiltration

Ermetic's platform is a central hub for cloud security professionals, offering insights into cloud security posture management (CSPM), identity and access management (IAM), and data protection in the cloud. Through articles, reports, and case studies, Ermetic offers insights into securing cloud environments and ensuring compliance with security standards. Security professionals can learn about cloud security best practices, threat detection techniques, and security automation to mitigate risks in cloud deployments.

ermetic

The Azure Metadata Protection You Didn't Know Was There was co-authored by Lior Zatlavi and Liv Matan. This protection strengthens the rationale for avoiding sending VMs to do a managed service job. The metadata service holds and serves session tokens for a proxy identity that has privileges to access resources in the cloud environment.

The Azure Metadata Protection You Didn’t Know Was There

OK, But People Use Managed Services - Don’t They?