github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/avd_docs/azure/keyvault/AVD-AZU-0017/Terraform.md (about)

     1  
     2  Set an expiry for secrets
     3  
     4  ```hcl
     5   resource "azurerm_key_vault_secret" "good_example" {
     6     name            = "secret-sauce"
     7     value           = "szechuan"
     8     key_vault_id    = azurerm_key_vault.example.id
     9     expiration_date = "1982-12-31T00:00:00Z"
    10   }
    11   
    12  ```
    13  ```hcl
    14  resource "azuread_application" "myapp" {
    15    display_name = "MyAzureAD App"
    16  
    17    group_membership_claims = ["ApplicationGroup"]
    18    prevent_duplicate_names = true
    19  
    20  }
    21  
    22  resource "azuread_application_password" "myapp" {
    23    application_object_id = azuread_application.myapp.object_id
    24  }
    25  
    26  resource "azurerm_key_vault_secret" "myapp_pass" {
    27    name            = "myapp-oauth"
    28    value           = azuread_application_password.myapp.value
    29    key_vault_id    = azurerm_key_vault.cluster_key_vault.id
    30    expiration_date = azuread_application_password.myapp.end_date
    31    content_type    = "Password"
    32  }
    33  
    34  ```
    35  
    36  #### Remediation Links
    37   - https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/key_vault_secret#expiration_date
    38