Skip to content

Latest commit

 

History

History
22 lines (13 loc) · 887 Bytes

key-vault-recovery-enabled.md

File metadata and controls

22 lines (13 loc) · 887 Bytes

CloudSploit

AZURE / Key Vaults / Key Vault Recovery Enabled

Quick Info

Plugin Title Key Vault Recovery Enabled
Cloud AZURE
Category Key Vaults
Description Ensures that Purge Protection and Soft Delete are enabled on all Key Vaults
More Info Purge Protection and Soft Delete are features that safeguard losing key access. With these setting enabled, key vaults have recovery actions available to restore deleted or compromised key vaults.
AZURE Link https://docs.microsoft.com/en-us/azure/key-vault/key-vault-ovw-soft-delete
Recommended Action Once Key Vaults are created, the Azure CLI must be used to update the vault Soft Delete and Purge Protection settings.

Detailed Remediation Steps