Azure / Azure/PSRule.Rules.Azure

[FEATURE] Export key vault key metadata via data plane API

Open
#3,265 0 comments 0 reactions 0 assignees View on GitHub
feature: in-flight-export
Dominant language
PowerShell
Stars
447
Forks
109
Avg merge
2d 19h
Merged PRs (30d)
23

Description

### Your suggestion

The rule `Azure.KeyVault.AutoRotationPolicy` requires reading the key rotation policy but that is only available from the data plane API.

Currently the export process doesn't handle this option, and additional considerations such as RBAC or access policy permissions to the Keys is required (as well as network connection via Intermet/ service firewall/ private endpoints depending on the configuration).

Export of this data can be enabled however:

1. We need to take precautions that the key is not exported.
2. This should be opt-in to connect to the data plane for customers that want to.
3. Documentation needs to be built to support this.

### Alternatives

n/a

### Additional context

See #3261

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.