last sync: 2024-Nov-25 18:54:24 UTC

ElasticSan Volume Group should use customer-managed keys to encrypt data at rest

Azure BuiltIn Policy definition

Source Azure Portal
Display name ElasticSan Volume Group should use customer-managed keys to encrypt data at rest
Id 7698f4ed-80ce-4e13-b408-ee135fa400a5
Version 1.0.0
Details on versioning
Versioning Versions supported for Versioning: 1
1.0.0
Built-in Versioning [Preview]
Category ElasticSan
Microsoft Learn
Description Use customer-managed keys to manage the encryption at rest of your VolumeGroup. By default, customer data is encrypted with platform-managed keys, but CMKs are commonly required to meet regulatory compliance standards. Customer-managed keys enable the data to be encrypted with an Azure Key Vault key created and owned by you, with full control and responsibility, including rotation and management.
Mode All
Type BuiltIn
Preview False
Deprecated False
Effect Default
Audit
Allowed
Audit, Disabled
RBAC role(s) none
Rule aliases IF (1)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.ElasticSan/elasticSans/volumeGroups/encryption Microsoft.ElasticSan elasticSans/volumeGroups properties.encryption True False
Rule resource types IF (1)
Microsoft.ElasticSan/elasticSans/volumeGroups
Compliance Not a Compliance control
Initiatives usage none
History
Date/Time (UTC ymd) (i) Change type Change detail
2023-12-14 19:23:04 add 7698f4ed-80ce-4e13-b408-ee135fa400a5
JSON compare n/a
JSON
api-version=2021-06-01
EPAC