Storage account encryption scopes should use customer-managed keys to encrypt data at rest

azure.keyvault
Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel, n'hésitez pas à nous contacter.

Description

This rule checks whether storage account encryption scopes are using customer-managed keys to encrypt data at rest. It is important to use customer-managed keys for encryption to ensure better control and security of data at rest.

Remediation

To ensure storage account encryption scopes use customer-managed keys, update the encryption settings to use customer-managed keys. For instructions on how to do this, see: Azure Documentation