---
id: 7827
title: "Azure Deployment Scripts: Assuming User-Assigned Managed Identities"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/cloud-pentesting/azure-user-assigned-managed-identities-via-deployment-scripts/"
published_at: "2024-03-14T00:00:00Z"
tags: ["cloud", "cloud-security", "privilege-escalation", "penetration-testing", "azure", "managed-identity", "deployment-scripts"]
phying_url: "https://phying.com/item/7827"
lang: en
---

# Azure Deployment Scripts: Assuming User-Assigned Managed Identities

## Summary

NetSPI shows how attackers can attach user-assigned Managed Identities to Azure Deployment Scripts to mint identity tokens, adding Deployment Scripts to the list of managed identity escalation paths.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2024-03-14T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/cloud-pentesting/azure-user-assigned-managed-identities-via-deployment-scripts/
- **Phying News:** https://phying.com/item/7827