Ensure that data at rest and in transit is encrypted in Azure Databricks using customer managed keys (CMK)

Set up the azure integration.

이 페이지는 아직 영어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우 언제든지 연락주시기 바랍니다.

Description

Enable customer-managed keys (CMK) for Azure Databricks workspace encryption to control encryption keys for data at rest and in transit.

Remediation

  1. Go to Databricks > select workspace > Configuration
  2. Under Customer-managed keys, enable encryption for managed disk and/or managed services
  3. Select your Key Vault and specify the encryption key
az databricks workspace update \
  --name <workspace-name> \
  --resource-group <resource-group-name> \
  --disk-key-name <key-name> \
  --disk-key-vault <key-vault-uri> \
  --disk-key-version <key-version>

References

  1. Azure Databricks customer-managed keys
  2. CIS Azure v4.0.0 - 6.3.3