You must enforce a maximum number of days that new keys in an Azure Key Vault can be valid while minimizing administrative effort. Which service should you use?

Azure Policy is the correct choice because it allows you to define and enforce standards and compliance at scale across your Azure resources. You can create a custom policy definition or use a built-in policy to set a maximum validity period for keys in Azure Key Vault. This policy can then be assigned to a scope (e.g., a resource group or subscription), ensuring that all new keys created within that scope adhere to the defined validity period without requiring manual intervention. Azure Purview is for data governance and discovery, not for enforcing key validity periods. Key Vault properties allow you to configure settings for individual keys but don't provide a centralized enforcement mechanism for new keys across multiple vaults. Azure Blueprints help define repeatable sets of Azure resources that adhere to organizational standards, but Azure Policy is the specific service for enforcing ongoing compliance rules like key validity.