A compromised developer account has Reader access to a resource group.

finance-reporting-api

Detailed Solution:

Set the resource group:

RG= " rg-prod-apps-eastus "

List resources:

az resource list \

--resource-group " $RG " \

--output table

Expected output:

Name ResourceGroup Location Type

---------------------- --------------------- ---------- -------------------------------

finance-reporting-api rg-prod-apps-eastus eastus Microsoft.Web/sites

prod-reportstore01 rg-prod-apps-eastus eastus Microsoft.Storage/storageAccounts

kv-finance-prod rg-prod-apps-eastus eastus Microsoft.KeyVault/vaults

The exposed App Service is:

finance-reporting-api

================