Policy: Azure > Storage > Storage Account > Access Keys > Rotation Reminder

Configure the access keys rotation reminder settings required for Azure > Storage > Storage Account.

Enabling rotation reminder on a Storage Account will ensure that access keys can be rotated regularly and maintain high security.

Resource Types

This policy targets the following resource types:

Azure > Storage > Storage Account

Primary Policy

This policy is used with the following primary policy:

Azure > Storage > Storage Account > Access Keys

Days

Controls

Policy Packs

This policy setting is used by the following policy packs:

Azure CIS v2.0.0 - Section 3 - Storage Accounts

Policy Specification

Schema Type	`string`
Default	`Skip`
Valid Values [YAML]	`Skip` `Check: Enabled per Rotation Reminder > Days` `Check: Disabled` `Enforce: Enabled per Rotation Reminder > Days` `Enforce: Disabled`
Examples [YAML]	`Check: Enabled per Rotation Reminder > Days`

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/security

Policy Type URI

tmod:@turbot/azure-storage#/policy/types/storageAccountAccessKeysRotationReminder

GraphQL

query policyType(id: "tmod:@turbot/azure-storage#/policy/types/storageAccountAccessKeysRotationReminder") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/azure-storage#/policy/types/storageAccountAccessKeysRotationReminder'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/azure-storage#/policy/types/storageAccountAccessKeysRotationReminder'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/azure-storage#/policy/types/storageAccountAccessKeysRotationReminder"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/azure-storage#/policy/types/storageAccountAccessKeysRotationReminder"