I want to create a policy to audit Key Vault if the "Allow public access from specific virtual networks and IP addresses" is enabled

prasannarajayya 0

I want to create a policy to audit Key Vault if the Allow public access from specific virtual networks and IP addresses is enabled.

From my search I get options for

Microsoft.KeyVault/vaults/publicNetworkAccess

Can I please know what is the right way to achieve the requirement

AnuragSingh-MSFT 21,361 Reputation points

2023-08-30T09:14:06.4733333+00:00

@prasannarajayya , can you please clarify the question a bit more.

With "Allow public access" - access to KeyVault can be done from any network, as long as the request reaches the keyaVult. I don't understand the "Allow public access from specific virtual networks and IP addresses" part.

For your reference, there is a built-in policy in Azure Portal that can be used to Disable public access to KeyVault. This policy can be modified to meet your needs. For this built-in policy definition, see Azure Key Vault should disable public network access

Hope this helps.
AnuragSingh-MSFT 21,361 Reputation points

2023-08-31T08:04:33.8033333+00:00

@prasannarajayya , Following-up to check if you had a chance to review the reply above provided.

Your answer