💼 8.3.1.4 Ensure 'Purge protection' is Set to 'Enabled' for Azure Key Vault Managed HSM (Automated)
- ID:
/frameworks/cis-azure-v7.0.0/08/03/01/04
Stats
not available
Description
A deleted Managed HSM and its deleted keys stay recoverable for a soft-delete retention period of 7 to 90 days. The Purge protection setting, Enabled or Disabled, decides whether a deleted HSM or key can be purged, which deletes it permanently, before that period ends.
Similar
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|
Policies (1)
| Policy | Logic Count | Flags | Compliance |
|---|---|---|---|
| 🛡️ Azure Managed HSM purge protection is not enabled🟢⚪ | 🟢 x2, ⚪ x1 | no data |