Query: Storage accounts should use Microsoft-managed key for encryption

Description

Use Microsoft-managed key to encrypt your storage account. Microsoft-managed key is the default and simplest option for encryption at rest.

Query

Tables used in this query:

• azure_storage_account
• azure_subscription

Controls using this query:

• 2.1.1.1.1 Ensure Critical Data is Encrypted with Microsoft Managed Keys (MMK)
• Storage accounts should use Microsoft-managed key for encryption

SQL