Power Apps: Expand model access and Maker Studio availability for generative pages via GitHub

🚨 The Signal: Power Apps makers can now connect GitHub accounts to access generative AI models for page design, expanding AI capabilities and availability to more regions. This introduces external model dependencies and potential data egress risks.

The Impact

Power Apps makers using GitHub for generative AI introduce new data egress and supply chain risks.

• Makers: New external service integration may expose sensitive data.
• Security Teams: Requires review of data flows to GitHub and third-party AI models.
• Admins: Need to assess and control GitHub account linking and data sharing policies.
• Organisations: Increased attack surface from external AI model dependencies.

The Action

1. Review Power Platform Data Loss Prevention (DLP) policies for GitHub connectors.
2. Assess data classification and sensitivity of information used with generative AI features.
3. Educate makers on responsible AI use and data handling when connecting external services.
4. Monitor Power Apps audit logs for GitHub connector usage and generative AI interactions.
5. Consult ASD ISM controls for supply chain risk management (ISM 16.1) and data egress (ISM 13.1).

Domain: Agentic-AI · Impact: high · Workload: Other