Skip to main content

💼 9.11 Ensure Azure Keyvaults are Used to Store Secrets - Level 2 (Manual | Not supported, requires a manual assessment)

  • Contextual name: 💼 9.11 Ensure Azure Keyvaults are Used to Store Secrets - Level 2 (Manual | Not supported, requires a manual assessment)
  • ID: /frameworks/cis-azure-v1.4.0/09/11
  • Located in: 💼 9 AppService

Description​

Encryption keys ,Certificate thumbprints and Managed Identity Credentials can be coded into the APP service, this renders them visible as part of the configuration, to maintain security of these keys it is better to store in an Azure Keyvault and reference them from the Keyvault.

Similar​

  • Internal
    • ID: dec-c-c5f7397e

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags