---
title: Key rotation reminders should be enabled for each Storage Account
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: >-
  Docs > Datadog Security > OOTB Rules > Key rotation reminders should be
  enabled for each Storage Account
---

> For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt).

# Key rotation reminders should be enabled for each Storage Account
 
## Description{% #description %}

Enable key rotation reminders on each Storage Account by configuring a key expiration period. When `keyExpirationPeriodInDays` is set, Azure surfaces a reminder to rotate the account access keys before they exceed that age, reducing the window in which a leaked key remains valid.

This rule passes when the Storage Account's key policy defines a key expiration period greater than zero.

## Remediation{% #remediation %}

Set a key expiration period on the Storage Account. See [Manage account access keys: Create a key expiration policy](https://learn.microsoft.com/en-us/azure/storage/common/storage-account-keys-manage#create-a-key-expiration-policy).