Near Expiry Event Trigger for Azure Key Vault

Question

I have an event subscription in key vault for near expiry for a Secrect I created. I have expiry date of the key 60 minutes but I am not sure when would near expire event trigger. Is it 5 minutes before the expiry date time or 10 minutes or 1 minute. Where is it configured and Can I override that?

Answer 1

According to Microsoft documentation Azure Key Vault as Event Grid source , the Microsoft.KeyVault.KeyNearExpiry event is described as follows:

Triggered when the current version of a key is about to expire. The event time can be configured using key rotation policy(preview)

and

The key rotation policy allows users to configure rotation interval, expiration interval for rotated keys, and near expiry notification period for monitoring expiration using event grid notifications.