Remediation
From Azure Portalβ
- Go to
Key vaults. - Click the name of a key vault.
- Under
Settings, clickNetworking. - Under
Firewalls and virtual networks, next toAllow access from:, click the radio button next toDisable public access. - Click
Apply. - Repeat steps 1-5 for each key vault requiring remediation.
From Azure CLIβ
For each key vault requiring remediation, run the following command to disable public network access:
az keyvault update --resource-group <resource-group> --name <key-vault> --public-network-access Disabled
From PowerShellβ
For each key vault requiring remediation, run the following command to disable public network access:
Update-AzKeyVault -ResourceGroupName <resource-group> -VaultName <vault-name> -PublicNetworkAccess "Disabled"