diff --git a/src/pentesting-cloud/azure-security/az-services/az-sql.md b/src/pentesting-cloud/azure-security/az-services/az-sql.md
index 53e505835..1edb52f4f 100644
--- a/src/pentesting-cloud/azure-security/az-services/az-sql.md
+++ b/src/pentesting-cloud/azure-security/az-services/az-sql.md
@@ -21,6 +21,8 @@ Azure SQL consists of four main offerings:
 - Private endpoints.
 - It’s also possible to restrict connections based on domain names.
 - It’s also possible to allow Azure services to access it (like to use the Query editor in the portal or to allow an Azure VM to connect).
+  - If an SQL Server has *Allow Azure services and resources to access this server* set to "Enabled", Azure will automatically create a hidden firewall rule that allows all network traffic originating from Azure to connect to the SQL Server — including resources from any tenant.
+  - This means that if you obtain valid SQL credentials, you can connect to the victim Azure SQL Server from an Azure VM inside your own attacker‑controlled tenant. [The MS docs explains this](https://learn.microsoft.com/en-us/azure/azure-sql/database/network-access-controls-overview?view=azuresql#allow-azure-services)
 
 **Authentication Methods:**