Merge pull request #321 from Iceman3900/patch-1

Update Azure SQL Server Network Access Details

Author: carlospolop

src/pentesting-cloud/azure-security/az-services/az-sql.md

@@ -21,6 +21,8 @@ Azure SQL consists of four main offerings:
 - Private endpoints.
 - It’s also possible to restrict connections based on domain names.
 - It’s also possible to allow Azure services to access it (like to use the Query editor in the portal or to allow an Azure VM to connect).
+  - If an SQL Server has *Allow Azure services and resources to access this server* set to "Enabled", Azure will automatically create a hidden firewall rule that allows all network traffic originating from Azure to connect to the SQL Server — including resources from any tenant.
+  - This means that if you obtain valid SQL credentials, you can connect to the victim Azure SQL Server from an Azure VM inside your own attacker‑controlled tenant. [The MS docs explains this](https://learn.microsoft.com/en-us/azure/azure-sql/database/network-access-controls-overview?view=azuresql#allow-azure-services)
 
 **Authentication Methods:**