Control: Azure > CIS v2.0 > 09 - Application Services > 9.11 - Ensure Azure Key Vaults are Used to Store Secrets
Configures auditing against a CIS Benchmark item.
Level: 2
Azure Key Vault will store multiple types of sensitive information such as encryption keys, certificate thumbprints, and Managed Identity Credentials. Access to these 'Secrets' can be controlled through granular permissions.
Resource Types
This control targets the following resource types:
Category
In Your Workspace
Developers
- tmod:@turbot/azure-cisv2-0#/control/types/r0911
- tmod:@turbot/cis#/control/categories/v071301
- turbot graphql controls --filter "controlTypeId:tmod:@turbot/azure-cisv2-0#/control/types/r0911"
Get Controls
Control Type URI
Category URI
GraphQL
CLI