Certificate Validity Period

MEDIUM

Source

CloudSploit

certificate-validity-period

Certificate Validity Period

Ensures that Key Vault certificates have a validity period of 12 months or less.

Limiting certificate validity reduces the risk of misuse if a certificate is compromised and helps ensure timely renewal, improving overall security and reliability.

Recommended Actions

Modify the certificate issuance policy and set the validity period to 12 months or less.

Links

https://learn.microsoft.com/en-us/azure/key-vault/certificates/create-certificate-scenarios

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.