Recovery Services vaults should use managed identity
Recovery Services vaults should use a managed identity for enhanced authentication security. Checkov CKV2_AZURE_35 asks that the Azure recovery services vault is configured with managed identity.
Recovery Services vaults should use a managed identity for enhanced authentication security.
What this control checks
Recovery Services vaults should use a managed identity
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control azure_compliance.control.recovery_service_vault_uses_managed_identity.
Scans of the Terraform code that flag the same setting before deployment: Checkov check CKV2_AZURE_35.
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
recovery_service_vault_uses_managed_identity - Checkov Check:
CKV2_AZURE_35 - Powerpipe Control:
azure_compliance.control.recovery_service_vault_uses_managed_identity
Last reviewed: 2026-10-14