Microsoft paid Tenable a bug bounty for an Azure flaw it says doesn't need a fix, just better documentation

Tenable disclosed that Azure Service Tags can be abused to bypass firewall rules and reach other customers' private web resources by controlling server-side HTTP requests from certain Azure services; Microsoft acknowledged the report, paid a bounty, but decided to address it via documentation and guidance rather than a software patch, and reports no observed exploitation in the wild.