Risk Level: Medium (should be achieved)
Ensure that the API access keys created for your Azure OpenAI service instances are regularly regenerated (rotated) in order to meet security and compliance requirements. These keys are used to access Microsoft Azure AI services API. By default, it is recommended to regenerate API access keys every 90 days.
The API access keys available for your Azure OpenAI service instances should be regenerated periodically to enhance security by minimizing the risk of unauthorized access if the keys are compromised. Regularly updating access keys helps protect sensitive data and maintain the integrity of the system.
Remediation / Resolution
To regenerate (rotate) the API access keys created for your Microsoft Azure OpenAI service instances, perform the following operations:
References
- Azure Official Documentation
- Azure AI services security
- Authenticate requests to Azure AI services
- Rotate keys in Azure AI services
- Azure Command Line Interface (CLI) Documentation
- az cognitiveservices account list
- az cognitiveservices account keys list
- az cognitiveservices account keys regenerate
Publication date Jun 21, 2024