Query: Key Vault secrets should have an expiration date

Description

Secrets should have a defined expiration date and not be permanent. Secrets that are valid forever provide a potential attacker with more time to compromise them. It is a recommended security practice to set expiration dates on secrets.

Query

Tables used in this query:

• azure_key_vault_secret
• azure_subscription

Controls using this query:

• 8.2 Ensure that the expiration date is set on all Secrets
• Key Vault secrets should have an expiration date

SQL