Azure Media Services Account Key
Service Name: Azure Media Services
Service Description: Azure Media Services is a cloud-based platform that enables you to build solutions that achieve broadcast-quality video streaming, enhance accessibility and distribution, analyze video content, and more.
Service Address: https://azure.microsoft.com/en-us/products/media-services/
Validation Type: API Auth
IP Allow list: IP restrictions can be configured at the Azure Media Services account level through Azure networking features and access control policies.
Secret Access Scope: Grants programmatic access to Azure Media Services resources, allowing operations such as content encoding, streaming, content protection, and media analytics.
Secret Revokement URL: https://portal.azure.com/ (Navigate to your Media Services account > Access keys > Regenerate keys)
Secret Example: GxNPwSxzYXR0cmlidXRlcy5jb20vd3MvMjAwNS8wNS9pZGVudGl0eS9jbGFpbXMvbmFtZWlkZW 50aWZpZXIiOiJkNmI5MTY5Yy00
Suspicious Activity Investigation Instructions:
- Review Azure Activity Logs for unusual operations on your Media Services account
- Check for unexpected content uploads, encoding jobs, or streaming endpoints
- Monitor for unauthorized access to protected content or streaming endpoints
- Review Azure Monitor metrics for unusual traffic patterns or resource usage
- Examine any changes to content protection policies or keys
Mitigation Instructions:
- Sign in to the Azure portal and navigate to your Media Services account
- Select "Access keys" from the left navigation menu
- Click "Regenerate" for the compromised key (Primary or Secondary)
- Update any applications or services using the old key with the newly generated
key
- Consider implementing Azure role-based access control (RBAC) for more
granular permissions
- Enable Azure Defender for additional threat protection
- Review and update network security settings to restrict access to trusted
networks
- Enable diagnostic logging for better monitoring and auditing