Skip to content

Latest commit

 

History

History
18 lines (13 loc) · 1.19 KB

key-vault-recovery-enabled.md

File metadata and controls

18 lines (13 loc) · 1.19 KB

CloudSploit

AZURE / Key Vault / Key Vault Recovery Enabled

Quick Info

Plugin Title Key Vault Recovery Enabled
Cloud AZURE
Category Key Vault
Description Ensures that Purge Protection and Soft Delete are enabled on all Key Vaults.
More Info Purge Protection and Soft Delete are features that safeguard losing key access. With these setting enabled, key vaults have recovery actions available to restore deleted or compromised key vaults.
AZURE Link https://docs.microsoft.com/en-us/azure/key-vault/key-vault-ovw-soft-delete
Recommended Action 1. Login to the Azure CLI. 2. Use the command and change vaultname to the vault to enable Soft Delete: 'az resource update --id $(az keyvault show --name vaultname -o tsv

Detailed Remediation Steps