Control: Key Vault secrets should have an expiration date
Description
Secrets should have a defined expiration date and not be permanent. Secrets that are valid forever provide a potential attacker with more time to compromise them. It is a recommended security practice to set expiration dates on secrets.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.keyvault_secret_expiration_setSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.keyvault_secret_expiration_set --shareSQL
This control uses a named query:
keyvault_secret_expiration_set