Storage account access keys should have periodic regeneration configured

What this control checks

Framework mappings

The clauses this control is mapped to in each framework.

Related controls

• Storage accounts should have shared key access disabled
• Key Vault secrets should have an expiration date
• Storage account encryption scopes should use customer-managed keys to encrypt data at rest

Tool mappings

Use these identifiers to cross-reference this control across tools, reports, and evidence.

• Compliance.tf Control: storage_account_access_keys_periodically_regenerated
• Powerpipe Control: azure_compliance.control.storage_account_access_keys_periodically_regenerated