Ensure that data at rest and in transit is encrypted in Azure Databricks using customer managed keys (CMK)

Docs > Datadog Security > OOTB Rules > Ensure that data at rest and in transit is encrypted in Azure Databricks using customer managed keys (CMK)

azure

Set up the azure integration.

このページは日本語には対応しておりません。随時翻訳に取り組んでいます。
翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください。

Description

Enable customer-managed keys (CMK) for Azure Databricks workspace encryption to control encryption keys for data at rest and in transit.

Remediation

Go to Databricks > select workspace > Configuration
Under Customer-managed keys, enable encryption for managed disk and/or managed services
Select your Key Vault and specify the encryption key

az databricks workspace update \
  --name <workspace-name> \
  --resource-group <resource-group-name> \
  --disk-key-name <key-name> \
  --disk-key-vault <key-vault-uri> \
  --disk-key-version <key-version>

References