🧠 Azure Storage Account Access Keys are not regenerated periodically - prod.logic.yaml🟢

• Contextual name: 🧠 prod.logic.yaml🟢
• ID: /ce/ca/azure/storage/access-keys-regenerated-periodically/prod.logic.yaml
• Tags:
  • 🟢 Logic test success
  • 🟢 Logic with extracts
  • 🟢 Logic with test data

Uses

• 📗 Azure Storage Account
• 🔌 Azure Storage Account - object.extracts.yaml
• 🧪 test-data.json

Test Results 🟢

Generated at: 2025-12-17T01:31:13.867265959Z Open

Result	Id	Condition Index	Condition Text	Runtime Error
🟢	001	✔️ 99	✔️ isDisappeared(CA10__disappearanceTime__c)	✔️ null
🟢	002	✔️ 199	✔️ extract('CA10__primaryKeyCreationTime__c').isEmpty() || extract('CA10__secondaryKeyCreationTime__c').isEmpty()	✔️ null
🟢	003	✔️ 299	✔️ not(extract('CA10__primaryKeyCreationTime__c').withinLastDays(90)) || not(extract('CA10__secondaryKeyCreationTime__c').withinLastDays(90))	✔️ null
🟢	004	✔️ 300	✔️ otherwise	✔️ null

Generation Bundle

	File	MD5
Open	/ce/ca/azure/storage/access-keys-regenerated-periodically/policy.yaml	4E263816696D3A0245500657EF73F79A
Open	/ce/ca/azure/storage/access-keys-regenerated-periodically/prod.logic.yaml	3A15030B565A4C5E217F98D24E1F0597
Open	/ce/ca/azure/storage/access-keys-regenerated-periodically/test-data.json	DDA82DD0A9264CCF7B576BE926F625C4
Open	/types/CA10__CaAzureStorageAccount__c/object.extracts.yaml	2FD9F962F192FC3E335D23D11315B8F9

Available Commands

repo-manager policies generate FULL /ce/ca/azure/storage/access-keys-regenerated-periodically/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/azure/storage/access-keys-regenerated-periodically/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/azure/storage/access-keys-regenerated-periodically/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/azure/storage/access-keys-regenerated-periodically/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/azure/storage/access-keys-regenerated-periodically/prod.logic.yaml

Content

Open File

---
inputType: "CA10__CaAzureStorageAccount__c"
testData:
  - file: test-data.json
importExtracts:
  - file: /types/CA10__CaAzureStorageAccount__c/object.extracts.yaml
conditions:
  - status: "UNDETERMINED"
    currentStateMessage: "Empty key creation time value"
    check:
      OR:
        args:
          - IS_EMPTY:
              arg:
                EXTRACT: "CA10__primaryKeyCreationTime__c"
          - IS_EMPTY:
              arg:
                EXTRACT: "CA10__secondaryKeyCreationTime__c"
  - status: "INCOMPLIANT"
    currentStateMessage: "Access keys hadn't been rotated in over 90 days."
    remediationMessage: "Rotate keys to align with best practices."
    check:
      OR:
        args:
          - NOT:
              arg:
                IS_WITHIN_LAST_DAYS:
                  offsetDays: 90
                  arg:
                    EXTRACT: "CA10__primaryKeyCreationTime__c"
          - NOT:
              arg:
                IS_WITHIN_LAST_DAYS:
                  offsetDays: 90
                  arg:
                    EXTRACT: "CA10__secondaryKeyCreationTime__c"
otherwise:
  status: "COMPLIANT"
  currentStateMessage: "Access keys had been rotated in over 90 days."