Storage account access keys should have periodic regeneration configured
Azure check storage_account_access_keys_periodically_regenerated is titled "Ensure that Storage Account access keys are periodically regenerated". The control description says to regenerate storage account access keys periodically.
For increased security, regenerate storage account access keys periodically.
What this control checks
Storage Account access keys are periodically regenerated
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control azure_compliance.control.storage_account_access_keys_periodically_regenerated.
Framework-specific interpretation
CIS Azure Benchmark v5.0.0: Mapped to 9.3.1.2 (Ensure that Storage Account access keys are periodically regenerated).
Framework mappings
The clauses this control is mapped to in each framework.
- 9.3.1.2 Ensure that Storage Account access keys are periodically regenerated
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
storage_account_access_keys_periodically_regenerated - Powerpipe Control:
azure_compliance.control.storage_account_access_keys_periodically_regenerated
Last reviewed: 2026-10-15