turbot/terraform_azure_compliance

Control: Key Vault secrets should have an expiration date

Description

Secrets should have a defined expiration date and not be permanent. Secrets that are valid forever provide a potential attacker with more time to compromise them. It is a recommended security practice to set expiration dates on secrets.

Usage

Run the control in your terminal:

powerpipe control run terraform_azure_compliance.control.keyvault_secret_expiration_set

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run terraform_azure_compliance.control.keyvault_secret_expiration_set --share

SQL

This control uses a named query:

keyvault_secret_expiration_set

Tags