> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/unified-identities/azure-identities/azure-resource-management/logic-apps.md).

# Logic Apps

Analyze, search and export all Logic apps.

The `Logic Apps` page provides a list of enumerated Azure Logic Apps. The list contains the `Name`, `Risk (%)`, `Exposure Point` and `Issue Counts`.

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-03da65c1f830fe0eeebd461f8465c4881957cb49%2FlogicApps_list.PNG?alt=media" alt=""><figcaption><p>Logic Apps</p></figcaption></figure>

#### Logic Apps Details

Details page contains the `Risk Score` of the logic app, `Exposure Point` and `Information` panes.

> Info You can analyze objects in the `Graph module` by clicking the `Visualize` button on the upper left side of the `Information Pane`.

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-8d236d4684a5a01a593da107331715659a7bb9b6%2FlogicApps_details.PNG?alt=media" alt=""><figcaption><p>Logic Apps Details</p></figcaption></figure>

#### Information

`Information Pane` contains `Details` and `Managed Identities` tabs.

#### Details

Details tab contains attributes below about the logic app.

| Attribute          | Description                                                  |
| ------------------ | ------------------------------------------------------------ |
| Name               | The display name of the logic app with tenant suffix         |
| Location           | The Azure region where the logic app is deployed             |
| State              | The current state of the logic app (e.g., Enabled, Disabled) |
| SKU Name           | The SKU name of the logic app (e.g., Standard, Consumption)  |
| Access Endpoint    | The access endpoint URL of the logic app                     |
| Provisioning State | The provisioning state of the logic app (e.g., Succeeded)    |
| Created Time       | The date and time when the logic app was created             |
| Changed Time       | The date and time when the logic app was last changed        |
| Tenant             | The tenant the logic app belongs to                          |
| Resource Group     | The resource group the logic app is associated with          |

**Runtime**

When runtime configuration is available, the following attributes are shown in a separate **Runtime** section.

| Attribute                          | Description                                                                                      |
| ---------------------------------- | ------------------------------------------------------------------------------------------------ |
| Kind                               | The kind of logic app (e.g., Stateful, Stateless)                                                |
| Workflow Version                   | The workflow definition version                                                                  |
| Integration Service Environment ID | The resource ID of the Integration Service Environment, if the logic app is deployed into an ISE |

#### Managed Identities

The `Managed Identities` tab lists Azure Active Directory service principals (managed identities) assigned to the logic app. A managed identity lets the logic app authenticate to other Azure resources (e.g. Key Vault, Storage, SQL) without storing credentials in code or configuration. Any role granted to an identity listed here is effectively granted to this logic app, so these identities are part of its attack surface.

| Attribute    | Description                                                 |
| ------------ | ----------------------------------------------------------- |
| Name         | The display name of the managed identity with tenant suffix |
| Display Name | The display name of the service principal                   |
| Type         | The service principal type (e.g., ManagedIdentity)          |

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-ed80aae2a29dcb48725ae84bbdfbb7c17c37f68d%2FlogicApps_managedIdentites.PNG?alt=media" alt=""><figcaption><p>Managed Identities</p></figcaption></figure>
