Loading controls...
Control: Storage account encryption scopes should use customer-managed keys to encrypt data at rest
Description
Use customer-managed keys to manage the encryption at rest of your storage account encryption scopes. Customer-managed keys enable the data to be encrypted with an Azure key-vault key created and owned by you. You have full control and responsibility for the key lifecycle, including rotation and management.
Usage
Run the control in your terminal:
steampipe check terraform_azure_compliance.control.storage_account_encryption_scopes_encrypted_at_rest_with_cmk
Snapshot and share results via Steampipe Cloud:
steampipe loginsteampipe check --share terraform_azure_compliance.control.storage_account_encryption_scopes_encrypted_at_rest_with_cmk
SQL
This control uses a named query:
storage_account_encryption_scopes_encrypted_at_rest_with_cmk