---
title: Private endpoints should be used to access Azure Key Vault
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: >-
  Docs > Datadog Security > OOTB Rules > Private endpoints should be used to
  access Azure Key Vault
---

> For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt).

# Private endpoints should be used to access Azure Key Vault
 
## Description{% #description %}

Private endpoints let clients access Azure Key Vault through a private IP address in a virtual network. Each key vault should have at least one approved private endpoint connection.

## Scope{% #scope %}

This rule checks private endpoint connection approval. It does not verify private DNS configuration, actual client traffic routing, or whether public network access is disabled.

## Remediation{% #remediation %}

Create a private endpoint connection for each key vault and approve the connection by following [Integrate Key Vault with Azure Private Link](https://learn.microsoft.com/en-us/azure/key-vault/general/private-link-service).