Loading controls...
Benchmark: Key Vault
Description
This benchmark provides a set of controls that detect Terraform Azure Key Vault resources deviating from security best practices.
Usage
Browse dashboards and select Key Vault:
steampipe dashboardOr run the benchmarks in your terminal:
steampipe check terraform_azure_compliance.benchmark.keyvaultSnapshot and share results via Steampipe Cloud:
steampipe loginsteampipe check --share terraform_azure_compliance.benchmark.keyvaultControls
- Azure Defender for Key Vault should be enabled
- Key Vault keys should have an expiration date
- Resource logs in Key Vault should be enabled
- Resource logs in Azure Key Vault Managed HSM should be enabled
- Azure Key Vault Managed HSM should have purge protection enabled
- Key vaults should have purge protection enabled
- Key Vault secrets should have an expiration date
- Azure Key Vault should disable public network access
- Key Vault should use a virtual network service endpoint