Query: Ensure that 'Enable key rotation reminders' is enabled for each Storage Account

Description

Access Keys authenticate application access requests to data contained in Storage Accounts. A periodic rotation of these keys is recommended to ensure that potentially compromised keys cannot result in a long-term exploitable credential. The 'Rotation Reminder' is an automatic reminder feature for a manual procedure, the default value is 90 days.

Query

Tables used in this query:

• azure_storage_account
• azure_subscription

Controls using this query:

• 10.3.1.1 Ensure that 'Enable key rotation reminders' is enabled for each Storage Account
• 3.3 Ensure that 'Enable key rotation reminders' is enabled for each Storage Account
• 3.3 Ensure that 'Enable key rotation reminders' is enabled for each Storage Account
• 4.3 Ensure that 'Enable key rotation reminders' is enabled for each Storage Account
• Ensure that 'Enable key rotation reminders' is enabled for each Storage Account

SQL