Azure Compliance ControlsAzure Recovery Services
Recovery Services vaults should use managed identity
Recovery Services vaults should use a managed identity for enhanced authentication security. Checkov CKV2_AZURE_35 asks that the Azure recovery services vault is configured with managed identity.
What this control checks
Recovery Services vaults should use a managed identity
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
recovery_service_vault_uses_managed_identity - Checkov Check:
CKV2_AZURE_35 - Powerpipe Control:
azure_compliance.control.recovery_service_vault_uses_managed_identity
Last reviewed: 2026-10-14