---
id: 7846
title: "Mistaken Identity: Extracting Managed Identity Credentials from Azure Function Apps"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/cloud-pentesting/mistaken-identity-azure-function-apps/"
published_at: "2023-11-16T00:00:00Z"
tags: ["cloud", "cloud-security", "azure", "credentials", "persistence", "managed-identity", "function-apps"]
phying_url: "https://phying.com/item/7846"
lang: en
---

# Mistaken Identity: Extracting Managed Identity Credentials from Azure Function Apps

## Summary

Azure Function Apps leak Managed Identity certificates via encrypted startup contexts whose decryption key sits in environment variables, enabling attacker persistence; Microsoft has fixed it.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2023-11-16T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/cloud-pentesting/mistaken-identity-azure-function-apps/
- **Phying News:** https://phying.com/item/7846