💼 8.3.10 Ensure the Default Network Access Rule for Key Vaults is Set to Deny (Automated)
- ID:
/frameworks/cis-azure-v7.0.0/08/03/10
Stats
not available
Description
A key vault accepts data-plane connections from all networks, only from allowed virtual networks and IP addresses, or only through private endpoints. The Allow access from setting selects between Allow public access from all networks, Allow public access from specific virtual networks and IP addresses, and Disable public access. Prerequisites: Add a virtual network rule, an IP address rule, or a private endpoint for every client that needs data-plane access before setting the default action to deny.
Similar
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|
Policies (1)
| Policy | Logic Count | Flags | Compliance |
|---|---|---|---|
| 🛡️ Azure Key Vault default network access is not restricted🟢 | 1 | 🟢 x6 | no data |