Define the expiration setting required for `Azure &gt; Key Vault &gt; Secret`.<br /><br />Enabling secret expiration ensures compliance with security policies by validating that all secrets are configured to expire, thereby preventing unauthorized, prolonged use of outdated or potentially compromised secrets. 

Azure > Management Group

Azure > Subscription

Azure > Tenant

Turbot > Folder

Turbot

Turbot > IAM > Turbot Identity

Turbot > IAM > Unidentified Identity

Azure > Active Directory > Directory

Kubernetes > Cluster

AWS > Account

GitHub > Repository

GCP > Project

ServiceNow > Instance

AWS > Glue > Crawler

AWS > Glue > Development Endpoint [Deprecated]

AWS > Glue > Job

AWS > Glue > ML Transform

AWS > Glue > Trigger

AWS > Glue > Workflow

AWS > DynamoDB > Table

AWS > EC2 > AMI

AWS > EC2 > Application Load Balancer

AWS > EC2 > Auto Scaling Group

AWS > EC2 > Classic Load Balancer

AWS > EC2 > Instance

AWS > EC2 > Key Pair

AWS > EC2 > Launch Template

AWS > EC2 > Network Interface

AWS > EC2 > Network Load Balancer

AWS > EC2 > Snapshot

AWS > EC2 > Target Group

AWS > EC2 > Volume

AWS > EC2 > Gateway Load Balancer

AWS > S3 > Bucket

AWS > S3 > Account

AWS > API Gateway > API

AWS > API Gateway > API V2

AWS > API Gateway > Stage

AWS > API Gateway > Domain Name V2

AWS > API Gateway > API Key

AWS > API Gateway > Usage Plan

AWS > API Gateway > Stage v2

AWS > VPC > VPC

AWS > VPC > Subnet

AWS > VPC > Route Table

AWS > VPC > DHCP Options

AWS > Backup > Backup Plan

AWS > Backup > Backup Vault

AWS > Backup > Recovery Point

AWS > Lambda > Function

AWS > CloudWatch > Alarm

AWS > Redshift > Cluster

AWS > Redshift > Cluster Parameter Group

AWS > Redshift > Manual Cluster Snapshot

AWS > Redshift > Cluster Subnet Group

AWS > VPC > Flow Log

AWS > VPC > Network ACL

AWS > VPC > Security Group

AWS > VPC > Security Group Rule

AWS > SQS > Queue

AWS > VPC > Egress Only Internet Gateway

AWS > VPC > Elastic IP

AWS > VPC > Internet Gateway

AWS > VPC > NAT Gateway

AWS > VPC > Endpoint

AWS > VPC > Endpoint Service

AWS > SNS > Topic

AWS > SNS > Topic Policy

AWS > Direct Connect > Connection

AWS > Direct Connect > Lag

AWS > Direct Connect > Virtual Interface

AWS > CloudTrail > Trail

AWS > Route 53 > Hosted Zone

AWS > KMS > Key

AWS > IAM > Access Analyzer

AWS > IAM > OpenID Connect

AWS > IAM > Role

AWS > IAM > Server Certificate

AWS > IAM > User

AWS > RDS > DB Cluster

AWS > RDS > DB Cluster Parameter Group

AWS > RDS > DB Cluster Snapshot [Manual]

AWS > RDS > DB Instance

AWS > RDS > DB Parameter Group

AWS > RDS > DB Snapshot [Manual]

AWS > RDS > Option Group

AWS > RDS > Subnet Group

Azure > App Service > App Service Plan

Azure > App Service > Web App

Azure > MySQL > Flexible Server

Azure > MySQL > Server [Deprecated]

Azure > Search Management > Search Service

Azure > Load Balancer > Load Balancer

Azure > Resource Group

Azure > Network Watcher > Network Watcher

Azure > Application Gateway Service > Application Gateway

Azure > Synapse Analytics > SQL Pool

Azure > Synapse Analytics > Workspace

Azure > Network > Application Security Group

Azure > Network > Express Route Circuits

Azure > Network > Network Interface

Azure > Network > Network Security Group

Azure > Network > Private DNS Zones

Azure > Network > Private Endpoints

Azure > Network > Public IP Address

Azure > Network > Route Table

Azure > Network > Virtual Network

Azure > Network > Virtual Network Gateway

Azure > Network > Private Link Service

Azure > Automation > Automation Account

Azure > Automation > Runbook

Azure > Application Insights > Application Insight

AWS > Region

GCP > Folder

Azure > Key Vault > Secret > Expiration > Days [Default]

Azure > Key Vault > Secret > Expiration

Define the expiration setting required for `Azure &gt; Key Vault &gt; Secret`.&#92;n&#92;nEnabling secret expiration ensures compliance with security policies by validating that all secrets are configured to expire, thereby preventing unauthorized, prolonged use of outdated or potentially compromised secrets.&#92;n

Azure > Key Vault > Secret

azure_keyvault_secret_expiration

Azure CIS v2.0.0 - Section 8 - Key Vault

Schema Type	`string`
Default	`Skip`
Valid Values [YAML]	`Skip` `Check: Expiration` `Enforce: Expiration`
Examples [YAML]	`Check: Expiration`

Policy: Azure > Key Vault > Secret > Expiration

Targets

Controls

Policy Packs

Policy Specification

Category

In Your Workspace

Developers