turbot/azure_compliance

Control: Storage account containing VHD OS disk not encrypted with CMK

Description

This policy identifies Azure Storage account containing VHD OS disk which are not encrypted with CMK. VHD's attached to Virtual Machines are stored in Azure storage. By default Azure Storage account is encrypted using Microsoft Managed Keys. It is recommended to use Customer Managed Keys to encrypt data in Azure Storage accounts for better control on the data.

Usage

Run the control in your terminal:

powerpipe control run azure_compliance.control.storage_account_containing_vhd_os_disk_cmk_encrypted

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run azure_compliance.control.storage_account_containing_vhd_os_disk_cmk_encrypted --share

SQL

This control uses a named query:

storage_account_containing_vhd_os_disk_cmk_encrypted

Tags