Explore hidden APIs within Azure and Entra in this 18-minute conference talk from fwd:cloudsec, delivered by cloud security expert Aled Mehta of Dolphin Labs. Delve into the security implications of undocumented APIs in Microsoft cloud services, examining how these lesser-known interfaces can become potential attack vectors. Learn about the challenges these hidden APIs present to cloud security practitioners, particularly as organizations strengthen their security measures and adversaries seek alternative paths of exploitation. Discover practical strategies for identifying and mitigating risks associated with legacy and undocumented APIs, while understanding the current limitations in platform-level security coverage. Gain valuable insights into API functionality, detection methods, and potential impact to enhance the security posture of cloud environments.