Merge pull request #985 from igorjnzl/main

Rewording of ALZ key vault recommendation
Azure · Jan 12, 2025 · c862fcc · c862fcc
2 parents ab6a19a + 79de06c
commit c862fcc
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/checklists/alz_checklist.en.json b/checklists/alz_checklist.en.json
@@ -2421,7 +2421,7 @@
         {
             "category": "Security",
             "subcategory": "Encryption and keys",
-            "text": "Follow a least privilege model by limiting authorization to permanently delete keys, secrets, and certificates to specialized custom Microsoft Entra ID roles.",
+            "text": "Follow a least privilege model by assigning just-in-time eligible RBAC roles for operators, administrators, and other user accounts requiring privileged access to Key Vault using Privileged Identity Management (PIM).",
             "waf": "Security",
             "service": "Key Vault",
             "guid": "dc055bcf-619e-48a1-9f98-879525d62688",