---
id: 8102
title: "Using Azure Automation Accounts to Access Key Vaults"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/cloud-pentesting/azure-automation-accounts-key-stores/"
published_at: "2019-03-20T00:00:00Z"
tags: ["cloud", "secrets", "privilege-escalation", "azure", "cloud-pentesting", "key-vault", "automation-accounts", "runbook"]
phying_url: "https://phying.com/item/8102"
lang: en
---

# Using Azure Automation Accounts to Access Key Vaults

## Summary

Karl Fosaaen shows how Contributor access to Azure Automation Accounts can be abused by modifying runbooks to dump secrets from Key Vaults, enabling attackers to read vault data without Owner rights.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2019-03-20T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/cloud-pentesting/azure-automation-accounts-key-stores/
- **Phying News:** https://phying.com/item/8102