Using a control plane bypass in Azure OpenAI as an example of when things go wrong, this talk delves into how Azure RBAC and other Azure platform security controls work, especially for those transitioning from different cloud environments.

👨‍🏫 What You’ll Learn:

• Differences in permission controls between Azure and AWS
• Neat security controls natively present in Azure
• Using Azure permissions to find unpublished APIs
• How to use published REST APIs to discover vulnerabilities
• Why managed/built-in roles need careful examination
• The dangers of using wildcards