turbot/azure_compliance
Loading controls...

Control: Key vaults should have soft delete enabled

Description

Deleting a key vault without soft delete enabled permanently deletes all secrets, keys, and certificates stored in the key vault. Accidental deletion of a key vault can lead to permanent data loss. Soft delete allows you to recover an accidentally deleted key vault for a configurable retention period.

Usage

Run the control in your terminal:

powerpipe control run azure_compliance.control.keyvault_soft_delete_enabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run azure_compliance.control.keyvault_soft_delete_enabled --share

SQL

This control uses a named query:

keyvault_soft_delete_enabled

Tags