turbot/terraform_azure_compliance

GitHub
Loading controls...

Control: Azure Data Explorer encryption at rest should use a customer-managed key

Description

Enabling encryption at rest using a customer-managed key on your Azure Data Explorer cluster provides additional control over the key being used by the encryption at rest. This feature is oftentimes applicable to customers with special compliance requirements and requires a Key Vault to managing the keys.

Usage

Run the control in your terminal:

steampipe check terraform_azure_compliance.control.kusto_cluster_encrypted_at_rest_with_cmk

Snapshot and share results via Steampipe Cloud:

steampipe login
steampipe check --share terraform_azure_compliance.control.kusto_cluster_encrypted_at_rest_with_cmk

SQL

This control uses a named query:

kusto_cluster_encrypted_at_rest_with_cmk

Tags