---
title: Ensure that logging for Azure Key Vault is Enabled
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: >-
  Docs > Datadog Security > OOTB Rules > Ensure that logging for Azure Key Vault
  is Enabled
---

# Ensure that logging for Azure Key Vault is Enabled
 
## Description{% #description %}

This rule checks if Azure Key Vault has a diagnostic setting enabled using the vault's embedded `diagnostic_settings`. At least one diagnostic setting must have at least one log category with `enabled: true`. Diagnostic settings allow you to send logs and metrics to Azure Monitor, Azure Storage, or Azure Event Hubs.

## Remediation{% #remediation %}

To enable diagnostic settings for Azure Key Vault, see [Enable Key Vault logging](https://learn.microsoft.com/en-us/azure/key-vault/general/howto-logging).