High-risk tools in Infomaniak Admin
6 of the 217 tools in Infomaniak Admin are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
infomaniak_api_callExecuteEscape hatch: call ANY Infomaniak public API endpoint (api.infomaniak.com) when no dedicated tool exists. GET runs immediately. POST/PUT/PATCH/DELETE follow the two-phase commit...
-
infomaniak_lock_drive_userExecuteLock a kDrive user through POST /2/drive/{drive_id}/users/{user_id}/lock. Two-phase commit with current user guard.
-
infomaniak_manage_dnssecExecuteUnified DNSSEC management for a domain:
-
infomaniak_manage_public_cloud_database_serviceExecuteManage Public Cloud DBaaS lifecycle and operational actions with two-phase confirmation.
-
infomaniak_nodejs_app_actionExecuteStart, stop, restart, or build a Node.js application. Two-phase commit: first call returns a plan + token, second call (with the token + same args) applies.
-
infomaniak_provision_site_fullExecuteProvision a complete website end-to-end: web site + MariaDB database + DNS A record. Two-phase commit at the workflow level. The plan lists every step that will run; on apply, e...
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.