Not able to enforce azure policy for for keyvault

Question

I am trying to implement azure custom policy for key vault where I want to enforce user to enable nbf and exp, without that it shouldn't be allowed. It directly comes as compliance without showing any resource validation. There is also no reference of activity logs and event in azure policy and Keyvault.

"policyRule": {
"if": {
"allOf": [
{
"field": "type",
"equals": "Microsoft.KeyVault/vaults"
},
{
"anyOf": [
{
"field": "Microsoft.KeyVault/vaults/secrets/attributes.enabled",
"notEquals": "true"
},

        {
          "field": "Microsoft.KeyVault/vaults/secrets/attributes.nbf",
          "equals": "null"
        },

        {
          "field": "Microsoft.KeyVault/vaults/secrets/attributes.exp",
          "equals": "null"
        },

     ]

    }
  ]
},
"then": {
  "effect": "Deny"
}

Answer 1

Key Vault keys and secrets are current not available for enforcement. Built-in policies will be available in the next month or so. Custom policies don't have an ETA at the moment.