Azure Key & Secrets Lifecycle Report

Overview

This report reviews Key & Secrets Lifecycle across your selected Azure subscriptions using 12 enabled configuration and recommendation checks. It identifies affected resources and provides remediation guidance for failed checks.

Checks use the configuration and recommendations available for the selected subscriptions. Resources that cannot be evaluated are reported as unavailable or not applicable.

Assessment scope

• KeyVault — 9 checks
• Storage — 3 checks

Example checks

• Key Vault Certificates Have Validity Period Less Than or Equal to 12 Months
• Key Vault Keys Have Automatic Rotation Enabled
• Key Vault Keys Have an Expiration Date
• Key Vault uses RBAC Permission Model
• Key Vault Secrets Have an Expiration Date

Upon completion, the report lists passed and failed checks, affected resources, unavailable evidence, and actionable remediation guidance.