# Ensure That 'Enable Key Rotation Reminders' Is Enabled for Each Storage Account

- Source: https://support.icompaas.com/support/solutions/articles/62000234837-ensure-that-enable-key-rotation-reminders-is-enabled-for-each-storage-account
- Section: [Solutions](https://support.icompaas.com/support/solutions) › [Azure Storage Services Benchmark v1.0.0](https://support.icompaas.com/support/solutions/62000112694) › [Azure Storage Services Benchmark](https://support.icompaas.com/support/solutions/folders/62000169262)
- Last updated: 2026-05-29
- Publisher: iCompaas, Inc. (https://www.icompaas.com)

# Description:

Storage Account access keys are used by applications to authenticate and access data. Because these keys act like passwords, they should be rotated regularly to reduce the risk of unauthorized access if a key becomes exposed. Enabling the Key Rotation Reminder helps ensure that administrators are notified to rotate these keys on a regular schedule, reducing the chance of long-term credential misuse.

# Rationale:

Enabling key rotation reminders helps ensure that access keys are rotated regularly, which strengthens security by reducing the risk of long-term key exposure. A consistent rotation schedule supports good security practices and helps meet regulatory requirements. For example, standards like PCI DSS recommend frequent rotation of cryptographic keys. Setting a 90-day reminder helps maintain this routine, but organizations should adjust the interval based on their own security policies and data sensitivity.

# Impact:

Key rotation reminders are safe, but when you actually rotate the access keys, any app using the old key will stop working until it is updated. This may cause service interruptions if not coordinated properly.

# Default Value:

By default, key rotation reminders are not enabled for Storage Accounts.

# Pre-requisites:

-   You must have Owner, Contributor, or Storage Account Contributor permissions on the Storage Account.
    
-   The Storage Account must already exist.
    
-   You must have access to the Access keys settings in the Storage Account.
    

  

Test Plan:

1.  Sign in to the Azure portal at [https://portal.azure.com](https://portal.azure.com/). 
    
2.  In the portal, search for Storage Accounts and open the required storage account.
    
3.  Under the Security + Networking, select Access keys. Select the set rotation reminder. 
    
4.  Check whether “Enable key rotation reminder” is enabled.
    

        ![](https://support.icompaas.com/assets/kb/bfa87a1d8189af59.png)

5.  If it is not enabled, follow the implementation Steps.
    

# Implementation Steps:

1.  Sign in to the Azure portal at [https://portal.azure.com](https://portal.azure.com/). 
    
2.  In the portal, search for Storage Accounts and open the required storage account.
    

   ![](https://support.icompaas.com/assets/kb/ec5369237cf56144.png)

3.  ### Under the Security + Networking, select Access keys. Select the set rotation reminder. 
    

           ![](https://support.icompaas.com/assets/kb/1d5249c78f7a9e2d.png)

4.  Enable key rotation reminder and toggle it on. Select the reminder interval (30, 60, or 90 days).
    

          ![](https://support.icompaas.com/assets/kb/e2ebc5aae76db347.png)

5.  Click Save to apply the changes.
    

Backout Plan:

1.  Sign in to the Azure portal at [https://portal.azure.com](https://portal.azure.com/) 
    
2.  In the portal, search for Storage Accounts and open the required storage account.
    
3.  Under the  Security + Networking, select Access keys.
    
4.  Click Edit rotation reminder and uncheck “Enable key rotation reminder.”
    

References:

-   [https://learn.microsoft.com/azure/storage/common/storage-account-keys-manage](https://learn.microsoft.com/azure/storage/common/storage-account-keys-manage)
-   [https://learn.microsoft.com/en-us/azure/storage/blobs/security-recommendations](https://learn.microsoft.com/en-us/azure/storage/blobs/security-recommendations)

[  
](https://learn.microsoft.com/en-us/azure/storage/common/storage-account-keys-manage)

## Related compliance guidance

- [SOC 2 compliance: a practical implementation guide for cloud-native SaaS teams](https://support.icompaas.com/compliance/soc-2-trust-services-criteria): Configuration checks like this one are the technical half of a SOC 2 / ISO 27001 programme — the guide shows where they fit, what else an auditor expects, and how to evidence them.
- [ISO/IEC 27001:2022 compliance: a practical implementation guide](https://support.icompaas.com/compliance/iso-27001-2022): ISO 27001 Annex A.8 (technological controls) is where cloud hardening evidence lands; the guide shows how to run the ISMS around it.