turbot/azure_compliance

Control: Key Vault keys should have an expiration date

Description

Cryptographic keys should have a defined expiration date and not be permanent. Keys that are valid forever provide a potential attacker with more time to compromise the key. It is a recommended security practice to set expiration dates on cryptographic keys.

Usage

Run the control in your terminal:

powerpipe control run azure_compliance.control.keyvault_key_expiration_set

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run azure_compliance.control.keyvault_key_expiration_set --share

SQL

This control uses a named query:

keyvault_key_expiration_set

Tags