Query: Ensure the key vault is recoverable

Description

The key vault contains object keys, secrets and certificates. Accidental unavailability of a key vault can cause immediate data loss or loss of security functions (authentication, validation, verification, non-repudiation, etc.) supported by the key vault objects. It is recommended the key vault be made recoverable by enabling the "Do Not Purge" and "Soft Delete" functions.

Query

Tables used in this query:

• azure_key_vault
• azure_subscription

Controls using this query:

• 3.3.5 Ensure the Key Vault is Recoverable
• 8.4 Ensure the key vault is recoverable
• 8.5 Enable role-based access control (RBAC) within Azure Kubernetes Services
• 8.5 Ensure the key vault is recoverable
• 8.5 Ensure the Key Vault is Recoverable
• 8.5 Ensure the Key Vault is Recoverable
• 8.6 Ensure the key vault is recoverable
• 8.7 Enable role-based access control (RBAC) within Azure Kubernetes Services
• Ensure the key vault is recoverable

SQL