Azure Key Vault Logging Overview

Overview:

Azure Key Vault includes two logging tables that are utilized to detect specific activity within the Azure Key Vault itself and the policy evaluations.

Table References:

AZKVAuditLogs

Azure Monitor Logs reference - AZKVAuditLogsMicrosoftLearn

AZKVPolicyEvaluationDetailsLogs

Azure Monitor Logs reference - AZKVPolicyEvaluationDetailsLogsMicrosoftLearn

Microsoft Documentation

Monitor Azure Key VaultMicrosoftLearn

Data Reference:

Monitoring data reference for Azure Key VaultMicrosoftLearn

Github References

azure-security-docs/articles/key-vault/general/monitor-key-vault-reference.md at main · MicrosoftDocs/azure-security-docsGitHub

azure-security-docs/articles/key-vault/general/monitor-key-vault.md at main · MicrosoftDocs/azure-security-docsGitHub