Azure Key Vault Public Network Access Control

Description

Code Example

resource "azurerm_key_vault" "example" {
  name                = "example-kv"
  resource_group_name = azurerm_resource_group.example.name
  location            = azurerm_resource_group.example.location

  # ... other configurations ...

+ public_network_access_enabled = false

  network_acls {
    #... configurations...
+   ip_rules = ["<valid_ip_range>"]
  }
}

Remediation

Terraform

Resource:

• azurerm_key_vault

Arguments:

• public_network_access_enabled
• network_acls

Rule Details

Field	Value
ID	IAC-0696
Severity	HIGH
IaC Type	arm
Frameworks	Terraform,
Checkov ID	CKV_AZURE_189

References

• Checkov Rule

---