Plugin Title Key Vault Recovery Enabled
Cloud AZURE
Category Key Vaults
Description Ensures that Purge Protection and Soft Delete are enabled on all Key Vaults
More Info Purge Protection and Soft Delete are features that safeguard losing key access. With these setting enabled, key vaults have recovery actions available to restore deleted or compromised key vaults.
AWS Link https://docs.microsoft.com/en-us/azure/key-vault/key-vault-ovw-soft-delete
Recommended Action Once Key Vaults are created, the Azure CLI must be used to update the vault Soft Delete and Purge Protection settings.


Detailed Remediation Steps

Want to scan for this risk automatically?

Get Started Now