Skip to content

Main Navigation

Ermetic
  • Platform
    • platform-col1
      • Platform
        • Platform OverviewSecure cloud infrastructure, identities and workloads
      • Products
        • CNAPPProtect cloud-native apps from development to runtime
        • CIEMSecure cloud identities and entitlements
        • CSPMIdentify and auto-remediate cloud misconfigurations
        • CWPPDetect and remediate risk across multicloud workloads
        • KSPMAutomate Kubernetes security and compliance
        • IaC SecurityScan, detect and fix risks in Infrastructure as Code
        • Just-in-TimeDeliver Just-in-Time cloud access
    • platform-col2
    • platform-col3
    • Start a free trial

      See how Ermetic can help secure your data.

  • Solutions
    • Cloud Provider
      • AWS
      • Azure
      • GCP
    • Role
      • CISOs
      • Cloud Security
      • DevSecOps
      • IAM Professionals
      • Cloud Identity Governance
      • Public Cloud Security
    • Industry
      • Healthcare
      • Government
      • Cloud-Native Companies
      • Financial Services
      • eCommerce
      • SaaS
      • Tech Vendors
    • Seeing is Believing

      See how Ermetic can help secure your data.

  • Learn
    • Resources
    • Events
    • Blog
    • Whitepapers
    • Webinars
    • Cloud Sec 101
    • Maturity Model
    • How’s your maturity?

      Take the Ermetic cloud security maturity self-assessment.

  • Company
    • About Us
    • News
    • Partners
    • Careers
    • Contact Us
    • Start a free trial

      See how Ermetic can help secure your data.

  • Free Trial
  • Get a Demo

Azure

  • Blog home
  • AWS
  • Azure
  • Cloud
  • GCP

EmojiDeploy: Smile! Your Azure web service just got RCE’d ._.

Ermetic’s research team discovered a remote code execution vulnerability affecting services such as Function Apps, App Service and Logic Apps on Azure cloud and other cloud sovereigns.

Liv Matan By Liv Matan

A Caveat for Azure VM Public IP Configuration

If you’re not familiar enough with the SKU attribute of the Azure public IP address, you may think you’re configuring VMs as public to the internet... but aren’t.

Lior Zatlavi By Lior Zatlavi

Public Network Access to Azure Resources Is Too Easy to Configure

For some types of Microsoft Azure resources and subnets, it’s extremely easy to configure what is essentially public network access. We describe here some examples and how to reduce such risks.

Lior Zatlavi By Lior Zatlavi

Access Keys: An Unintended Backdoor-by-Design to Azure Storage Accounts Data

The importance of understanding the assignments of Azure resource roles when giving permissions.

Lior Zatlavi By Lior Zatlavi

The ABCs of Azure Identity Governance Tools

The main Azure mechanisms for governing identities and providing access permissions.

Lior Zatlavi By Lior Zatlavi

Deconstructing Azure Access Management using RBAC

The basics of Azure RBAC -- the main mechanism in Azure for granting permissions to resources.

Lior Zatlavi By Lior Zatlavi
  • See for Yourself!

    Let us know how to reach you, and we will be in touch to schedule a demo

    Get a demo Watch video
  • Certifications

  • Product

    • Home
    • Platform
    • CNAPP
    • CIEM
    • CSPM
    • CWP
    • KSPM
    • IaC
    • JIT
  • Solutions

    • AWS
    • Azure
    • GCP
    • Public Cloud Security
    • Cloud Identity Governance
    • CISOs
    • Cloud Security
    • DevSecOps
    • IAM Professionals
  • Learn

    • Resources
    • Events
    • Blog
    • Whitepapers
    • Webinars
    • Maturity Model
  • Company

    • About Us
    • News
    • Partners
    • Careers
    • Contact Us
  • © 2023 Ermetic Ltd. All Rights Reserved | Privacy Policy | Terms of Use