The service may be configured to aggregate metrics from multiple accounts, subscriptions, or projects into a single monitoring scope, so that users of the scope can view telemetry across tenancy boundaries.
Cross-Account Monitoring Scope
CCC.Monitor.CP14
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.Monitor.TH10 | Monitoring Scope Exposes Telemetry Across Accounts | A cross-account monitoring scope may be configured to link more accounts, subscriptions, or projects than intended, or the central monitoring account may be granted to users who are not authorized in the linked accounts. Users of the scope can then read metrics, traces, and alert state for every linked account without holding access in those accounts. This impacts the confidentiality of telemetry across tenancy boundaries. |