Azure > Key Vaults >

Key Vault Key Expiry Non RBAC

HIGH

Source

CloudSploit

key-vault-key-expiry-non-rbac

management console

Key Vault Key Expiry Non RBAC

Ensures that expiration date is set for all keys in non RBAC Key Vaults.

Setting an expiration date on keys helps in key lifecycle management and ensures that keys are rotated regularly.

Recommended Actions

Modify keys in non-RBAC Key Vaults to have an expiration date set.

Links

https://learn.microsoft.com/en-us/azure/key-vault/about-keys-secrets-and-certificates

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.