Query: Azure Key Vaults should use private link

Description

Azure Private Link lets you connect your virtual networks to Azure services without a public IP address at the source or destination. The Private Link platform handles the connectivity between the consumer and services over the Azure backbone network. By mapping private endpoints to key vault, you can reduce data leakage risks.

Query

Tables used in this query:

• azure_key_vault
• azure_subscription

Controls using this query:

• 3.3.7 Ensure that Private Endpoints are Used for Azure Key Vault
• 8.7 Ensure that Private Endpoints are Used for Azure Key Vault
• 8.7 Ensure that Private Endpoints are Used for Azure Key Vault
• 8.7 Ensure that Private Endpoints are Used for Azure Key Vault
• Azure Key Vaults should use private link

SQL