A Key Vault certificate and a storage customer-managed key are nearing expiry. How should the security engineer reduce break-glass surprises for callers?
Select an answer to reveal the explanation.
Short Explanation
Don’t wait for the app to face-plant on an expired CMK. Hook expiry and rotation events—Event Grid is the usual megaphone—and automate rotation so callers slide onto the new version.
Full Explanation
Key Vault can emit events related to near-expiry and rotation so automation and operators act before callers break. Event Grid is the documented notification integration path for many Key Vault event scenarios, used here as supporting infrastructure rather than an AZ-204 deep skill. Automated rotation creates new versions for applications to consume. Disabling expiry, waiting for failure, or exporting private keys to desktop shares are not secure lifecycle practices.