Azure / Azure/PSRule.Rules.Azure
[FEATURE] Export key vault key metadata via data plane API
- Dominant language
- PowerShell
- Stars
- 447
- Forks
- 109
- Avg merge
- 2d 19h
- Merged PRs (30d)
- 23
Description
### Your suggestion
The rule `Azure.KeyVault.AutoRotationPolicy` requires reading the key rotation policy but that is only available from the data plane API.
Currently the export process doesn't handle this option, and additional considerations such as RBAC or access policy permissions to the Keys is required (as well as network connection via Intermet/ service firewall/ private endpoints depending on the configuration).
Export of this data can be enabled however:
1. We need to take precautions that the key is not exported.
2. This should be opt-in to connect to the data plane for customers that want to.
3. Documentation needs to be built to support this.
### Alternatives
n/a
### Additional context
See #3261
Contributor guide
Assessment
This issue has not been assessed yet.