💼 A.10.1.2 Key management

Description

A policy on the use, protection and lifetime of cryptographic keys shall be developed and implemented through their whole lifecycle

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance

Policy	Logic Count	Flags	Compliance
🛡️ AWS IAM User Access Keys are not rotated every 90 days or less🟢	1	🟢 x6	no data
🛡️ AWS IAM User has more than one active access key🟢	1	🟢 x6	no data
🛡️ AWS IAM User with console and programmatic access set during the initial creation🟢⚪		🟢 x2, ⚪ x1	no data
🛡️ AWS KMS Symmetric CMK Rotation is not enabled🟢	1	🟢 x6	no data
🛡️ Azure Key Vault Soft Delete and Purge Protection functions are not enabled🟢	1	🟢 x6	no data
🛡️ Azure Non-RBAC Key Vault stores Keys without expiration date🟢	1	🟢 x6	no data
🛡️ Azure Non-RBAC Key Vault stores Secrets without expiration date🟢	1	🟢 x6	no data
🛡️ Azure RBAC Key Vault stores Keys without expiration date🟢	1	🟢 x6	no data
🛡️ Azure RBAC Key Vault stores Secrets without expiration date🟢	1	🟢 x6	no data
🛡️ Azure SQL Server Transparent Data Encryption Protector is not encrypted with Customer-managed key🟢	1	🟢 x6	no data
🛡️ Azure Storage Account With Critical Data is not encrypted with customer managed key🟢⚪		🟢 x2, ⚪ x1	no data
🛡️ Google Project with KMS keys has a principal with Owner role🟢	1	🟢 x6	no data