Ensure that data at rest and in transit is encrypted in Azure Databricks using customer managed keys (CMK)

azure

Set up the azure integration.

Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel, n'hésitez pas à nous contacter.

Description

Enable customer-managed keys (CMK) for Azure Databricks workspace encryption to control encryption keys for data at rest and in transit.

Remediation

  1. Go to Databricks > select workspace > Configuration
  2. Under Customer-managed keys, enable encryption for managed disk and/or managed services
  3. Select your Key Vault and specify the encryption key
az databricks workspace update \
  --name <workspace-name> \
  --resource-group <resource-group-name> \
  --disk-key-name <key-name> \
  --disk-key-vault <key-vault-uri> \
  --disk-key-version <key-version>

References

  1. Azure Databricks customer-managed keys
  2. CIS Azure v4.0.0 - 6.3.3