Private endpoints will secure network traffic from Azure Key Vault to the resources requesting secrets and keys.
Why This Matters
Without private endpoints, network traffic between Azure Key Vault and the resources requesting secrets and keys travels over public endpoints. This exposes your sensitive data to potential interception or monitoring by other resources on the same network. For high-security environments like key and certificate repositories, this is a significant compliance risk that can lead to unauthorized access.
What Aether365 Checks
Aether365 verifies that Azure Key Vault instances use private endpoints to restrict network traffic to approved resources. This check appears in your Aether365 dashboard under the azure-azure-keyvault checks category and is part of the CIS Microsoft Azure Foundations Benchmark.