Frequently used Azure SaaS applications
I’ll summarize the most popular SaaS applications in Azure. It’s unlikely that you will be pentesting them because Microsoft has more responsibility for the security of its SaaS than for its PaaS and IaaS. Your company just inputs its own data into these applications or embeds them in its own applications. But it’s important as an Azure pentester to understand the many ways Azure is used so that you can contextualize how SaaS fits in with the rest of Azure and how the company you work for may be using Azure SaaS applications. Plus, the data your organization inputs into Azure’s SaaS applications is your organization’s security responsibility. For instance, if someone in your organization puts their sensitive bank account information into Microsoft Cost Management outside of the cryptography Microsoft has implemented, that’s your organization’s problem. If your organization has a PaaS or IaaS application...