Azure & Power Platform findingView consolidated app →

Azure Bot Service: contoso-helpdesk-bot

Azure & Power Platform Microsoft · Agent platform · resource type microsoft.botservice/botservices (azurebot)

Policy · none set

Policy changes re-score this app on the next sync, which starts right away.

Finding · Open

Risk score

Medium

People

Owner tag on the resource

Network

Public

Auth mode unknown

Deployments

No models deployed

azurefirst-partypublic-endpoint

Next steps

Recommended actions

01'Azure Bot Service: contoso-helpdesk-bot' accepts traffic from any network. Put it behind a private endpoint or restrict network ACLs to your VNet and office ranges.

Azure

Resource posture

Resource: /subscriptions/5c2e1f4a-1111-4a5b-9c8d-000000000001/resourceGroups/rg-bots/providers/Microsoft.BotService/botServices/contoso-helpdesk-bot
Type: microsoft.botservice/botservices (azurebot)
Subscription: 5c2e1f4a-1111-4a5b-9c8d-000000000001
Resource group: rg-bots
Region: global
Public network: enabled
Local auth (keys): unknown
Managed identity: no
Owner: [email protected]

Tagsowner: [email protected]

Who

People

Identifiers come from device telemetry and proxy logs, so they may be account names rather than full directory entries.

Person	Department	Source	Sign-ins · 30 d	Granted
[email protected] [email protected]	n/a	Platform owner or maker	0	No direct grant

Why

Evidence

azure_resource

Azure Bot Service resource 'contoso-helpdesk-bot' in rg-bots (global), subscription 5c2e1f4a: 0 deployments, public network access

Detail

{
  "kind": "azurebot",
  "tags": {
    "owner": "[email protected]"
  },
  "resourceId": "/subscriptions/5c2e1f4a-1111-4a5b-9c8d-000000000001/resourceGroups/rg-bots/providers/Microsoft.BotService/botServices/contoso-helpdesk-bot",
  "deployments": [],
  "localAuthDisabled": null,
  "publicNetworkAccess": true
}