> ## Documentation Index
> Fetch the complete documentation index at: https://docs.codeant.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Keyvault

<AccordionGroup>
  <Accordion title="keyvault-content-type-for-secret">
    Key vault Secret should have a content type set
  </Accordion>

  <Accordion title="keyvault-ensure-secret-expires">
    Ensure that the expiration date is set on all secrets<br />**Likelihood**: LOW<br />**Confidence**: MEDIUM<br />**CWE**: <br />- CWE-262: Not Using Password Aging
  </Accordion>

  <Accordion title="keyvault-purge-enabled">
    Key vault should have purge protection enabled<br />**Likelihood**: MEDIUM<br />**Confidence**: MEDIUM<br />**CWE**: <br />- CWE-693: Protection Mechanism Failure
  </Accordion>

  <Accordion title="keyvault-specify-network-acl">
    Network ACLs allow you to reduce your exposure to risk by limiting what can access your key vault. The default action of the Network ACL should be set to deny for when IPs are not matched. Azure services can be allowed to bypass.<br />**Likelihood**: LOW<br />**Confidence**: LOW<br />**CWE**: <br />- CWE-284: Improper Access Control
    <br />**OWASP**: <br />- A05:2017 - Broken Access Control
    <br />- A01:2021 - Broken Access Control
  </Accordion>

  <Accordion title="keyvault-ensure-key-expires">
    Ensure that the expiration date is set on all keys<br />**Likelihood**: LOW<br />**Confidence**: MEDIUM<br />**CWE**: <br />- CWE-262: Not Using Password Aging
  </Accordion>
</AccordionGroup>