Control: Azure > CIS v5.0 > 8 - Security Services > 8.03 - Key Vault > 8.03.11 - Ensure certificate 'Validity Period (in months)' is less than or equal to '12'

Configures auditing against a CIS Benchmark item.

Level: 1

Restrict the validity period of certificates stored in Azure Key Vault to 12 months or less.

Limiting certificate validity reduces the risk of misuse if compromised and helps ensure timely renewal, improving security and reliability.

Resource Types

This control targets the following resource types:

Azure > Key Vault > Certificate

Policies

This control type relies on these other policies when running actions:

In Your Workspace

Developers

Control Type URI

tmod:@turbot/azure-cisv5-0#/control/types/r080311

Category URI

tmod:@turbot/cis#/control/categories/v071601

GraphQL

query controlType(id: "tmod:@turbot/azure-cisv5-0#/control/types/r080311") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/azure-cisv5-0#/control/types/r080311'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/azure-cisv5-0#/control/types/r080311"