turbot/terraform_azure_compliance

GitHub
Loading controls...

Control: Storage account encryption scopes should use customer-managed keys to encrypt data at rest

Description

Use customer-managed keys to manage the encryption at rest of your storage account encryption scopes. Customer-managed keys enable the data to be encrypted with an Azure key-vault key created and owned by you. You have full control and responsibility for the key lifecycle, including rotation and management.

Usage

Run the control in your terminal:

steampipe check terraform_azure_compliance.control.storage_account_encryption_scopes_encrypted_at_rest_with_cmk

Snapshot and share results via Steampipe Cloud:

steampipe login
steampipe check --share terraform_azure_compliance.control.storage_account_encryption_scopes_encrypted_at_rest_with_cmk

SQL

This control uses a named query:

storage_account_encryption_scopes_encrypted_at_rest_with_cmk

Tags