Skip to content

Enforce Credential Rotation Policies

Info

ID: MS-M7019
MITRE mitigation: -

Establish and enforce policies for regular rotation of deployment credentials, API keys, tokens, and other secrets. Regular rotation limits the window of opportunity for attackers to use compromised credentials.

Techniques Addressed by Mitigation

ID Name Use
MS-TA7007 Using deployment credentials Regularly rotate deployment credentials such as personal access tokens, publish profiles, and service principal secrets.