Turbot Guardrails Hub 
Hub
Mods
Azure
45
Mods
176
Resource Types
3,033
Policies
1,635
Controls
103
Quick Actions
102
IAM

Policy: Azure > CIS v4.0 > 10 - Storage Services > 10.03 - Storage Accounts > 10.03.01 - Secrets and Keys > 10.03.01.03 - Ensure 'Allow storage account key access' for Azure Storage Accounts is 'Disabled'

Configures auditing against a CIS Benchmark item.

Level: 1

Storage account keys provide full access to storage account data. Disabling shared key access forces all requests to be authorized using Azure Active Directory (Azure AD), which provides more fine-grained access control and audit capabilities.

Disabling shared key access improves security by enforcing Azure AD authentication, enabling better access control through RBAC, and providing detailed audit logs of who accessed what data.

Primary Policy

This policy is used with the following primary policy:

Controls

Setting this policy configures this control:

Policy Specification

Schema Type
string
Default
Per Azure > CIS v4.0 > 10 - Storage Services > 10.03 - Storage Accounts > 10.03.01 - Secrets and Keys
Valid Values [YAML]
  • >-
  Per Azure > CIS v4.0 > 10 - Storage Services > 10.03 - Storage Accounts >
  10.03.01 - Secrets and Keys

  • Skip

  • Check: Benchmark

Category

In Your Workspace

Developers