Review Non-Recoverable resources (CyberSec)

Barts-Life-Science / AzureTRE

An accelerator to help organizations build Trusted Research Environments on Azure.

https://microsoft.github.io/AzureTRE

MIT License

1 stars 0 forks source link

Review Non-Recoverable resources (CyberSec) #130

Open akolensky opened 3 months ago

akolensky commented 3 months ago

Details: A number o fresources were identified that did not benefit from protection against accidental or intenitonal deletion. This could result in disruption to business operations.

Recommendation: Enable Purge Protection on Key Vault to make the keys recoverable.

Reference: Quorum Cyber report