Control: Storage account encryption scopes should use customer-managed keys to encrypt data at rest
Use customer-managed keys to manage the encryption at rest of your storage account encryption scopes. Customer-managed keys enable the data to be encrypted with an Azure key-vault key created and owned by you. You have full control and responsibility for the key lifecycle, including rotation and management.
Run the control in your terminal:
steampipe check terraform_azure_compliance.control.storage_account_encryption_scopes_encrypted_at_rest_with_cmk
Snapshot and share results via Steampipe Cloud:
steampipe loginsteampipe check --share terraform_azure_compliance.control.storage_account_encryption_scopes_encrypted_at_rest_with_cmk
This control uses a named query:storage_account_encryption_scopes_encrypted_at_rest_with_cmk