Resource Type: Azure > Key Vault > Certificate

The Certificate resource type represents a certificate stored in Azure Key Vault. Certificates are used to secure connections and authenticate applications in Azure services. Key Vault certificates support X.509 certificates and can be created, imported, or issued by certificate authorities.

Resource Context

Certificate is a part of the Key Vault service.

Each Certificate lives under a Vault.

Controls

The primary controls for Azure > Key Vault > Certificate are:

It is also targeted by these controls:

Azure > CIS v5.0 > 8 - Security Services > 8.03 - Key Vault > 8.03.11 - Ensure certificate 'Validity Period (in months)' is less than or equal to '12'

Quick Actions

Delete

In Your Workspace

Developers

Resource Type URI

tmod:@turbot/azure-keyvault#/resource/types/certificate

Category URI

tmod:@turbot/turbot#/resource/categories/security

GraphQL

query resource(id: "tmod:@turbot/azure-keyvault#/resource/types/certificate") { … }

query resourceActivities(filter: "resourceId:'tmod:@turbot/azure-keyvault#/resource/types/certificate'") { … }

mutation createResource(input: { … })

mutation updateResource(input: { … })

CLI

Get Resource

turbot graphql resource --id "tmod:@turbot/azure-keyvault#/resource/types/certificate"

Steampipe Query

Get Resource

select * from guardrails_resource where resource_type_uri = 'tmod:@turbot/azure-keyvault#/resource/types/certificate';

Get Policy Settings (By Resource ID)

select * from guardrails_policy_setting where filter = 'resourceTypeId:"tmod:@turbot/azure-keyvault#/resource/types/certificate"';

Get Resource Notification

select * from guardrails_notification where resource_type_uri = 'tmod:@turbot/azure-keyvault#/resource/types/certificate' and notification_type in ('resource_updated', 'resource_created');