Key Vault Managed HSMs should have resource logs enabled
Resource logs in Azure Key Vault Managed HSM should be enabled. To recreate activity trails for investigation purposes when a security incident occurs or when your network is compromised, you may want to audit by enabling resource logs on Managed HSMs.
To recreate activity trails for investigation purposes when a security incident occurs or when your network is compromised, you may want to audit by enabling resource logs on Managed HSMs.
What this control checks
Resource logs in Azure Key Vault Managed HSM should be enabled.
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control azure_compliance.control.keyvault_managed_hms_logging_enabled.
Framework-specific interpretation
HIPAA HITRUST v9.2: Mapped to 1211.09aa3System.4-09.aa (09.10 Monitoring).
Framework mappings
The clauses this control is mapped to in each framework.
- 1211.09aa3System.4-09.aa 09.10 Monitoring
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
keyvault_managed_hms_logging_enabled - Powerpipe Control:
azure_compliance.control.keyvault_managed_hms_logging_enabled
Last reviewed: 2026-10-13