Control: Ensure the key vault is recoverable
Description
The key vault contains object keys, secrets and certificates. Accidental unavailability of a key vault can cause immediate data loss or loss of security functions (authentication, validation, verification, non-repudiation, etc.) supported by the key vault objects. It is recommended the key vault be made recoverable by enabling the "Do Not Purge" and "Soft Delete" functions.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.keyvault_vault_recoverableSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.keyvault_vault_recoverable --shareSQL
This control uses a named query:
keyvault_vault_recoverable