turbot/terraform_azure_compliance

GitHub
Loading controls...

Control: Key Vault secrets should have an expiration date

Description

Secrets should have a defined expiration date and not be permanent. Secrets that are valid forever provide a potential attacker with more time to compromise them. It is a recommended security practice to set expiration dates on secrets.

Usage

Run the control in your terminal:

steampipe check terraform_azure_compliance.control.keyvault_secret_expiration_set

Snapshot and share results via Steampipe Cloud:

steampipe login
steampipe check --share terraform_azure_compliance.control.keyvault_secret_expiration_set

SQL

This control uses a named query:

keyvault_secret_expiration_set

Tags