💼 5.11 Ensure Service Principals Holding Azure Role Assignments Do Not Use Client Secrets (Automated)
- ID:
/frameworks/cis-azure-v7.0.0/05/11
Stats
not available
Description
A service principal that holds an Azure role assignment signs in with a client secret, a certificate, or a federated credential, unless it is a managed identity, which has no readable credential. Prerequisites: Move each workload that signs in with a client secret to a managed identity, a federated credential, or a certificate, and confirm it works before removing the secret.
Similar
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|
Policies (1)
| Policy | Logic Count | Flags | Compliance |
|---|---|---|---|
| 🛡️ Azure Role-assigned Service Principal uses client secrets🟢⚪ | 🟢 x2, ⚪ x1 | no data |