Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
This article describes the Policy guardrails in place to ensure Azure Key Vault is deployed securely.
KeyVault GitHub Repository
KeyVault Policies Built in
| Name | Description | Version | Type | Effect | Policy definition |
|---|---|---|---|---|---|
| Azure Key Vault should disable public network access | Disable public network access for your key vault so that it's not accessible over the public internet to reduce data leakage risks. Learn more at: https://aka.ms/akvprivatelink. |
1.1.0 | Built in | AuditDeny | Link |
| Key vaults should have soft delete enabled | Deleting a key vault without soft delete enabled permanently deletes all secrets, keys, and certificates stored in the key vault. Accidental deletion of a key vault can lead to permanent data loss. Soft delete allows you to recover an accidentally deleted key vault for a configurable retention period. | 3.0.0 | Built in | AuditDeny | Link |