last sync: 2024-Nov-25 18:54:24 UTC

Event Hub namespaces (Premium) should use a customer-managed key for encryption

Azure Landing Zones (ALZ) Policy definition

Source Repository Azure Landing Zones (ALZ) GitHub
JSON Deny-EH-Premium-CMK
Deploy policy Deny-EH-Premium-CMK (1.0.0) to Azure
Display name Event Hub namespaces (Premium) should use a customer-managed key for encryption
Id Deny-EH-Premium-CMK
Version 1.0.0
Details on versioning
Category Event Hub
Description Event Hub namespaces (Premium) should use a customer-managed key for encryption.
Mode All
Type Custom Azure Landing Zones (ALZ)
Preview False
Deprecated False
Effect Default
Deny
Allowed
Audit, Deny, Disabled
RBAC role(s) none
Rule aliases IF (2)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.EventHub/namespaces/encryption.keySource Microsoft.EventHub namespaces properties.encryption.keySource True False
Microsoft.EventHub/namespaces/sku.name Microsoft.EventHub namespaces sku.name True False
Rule resource types IF (1)
Microsoft.EventHub/namespaces
Initiatives usage
Initiative DisplayName Initiative Id Initiative Category State
Deny or Audit resources without Encryption with a customer-managed key (CMK) Enforce-Encryption-CMK Encryption GA
History
Date/Time (UTC ymd) (i) Change type Change detail
2024-06-03 17:39:43 add Deny-EH-Premium-CMK
JSON compare n/a
JSON
EPAC
Deploy policy Deny-EH-Premium-CMK (1.0.0) to Azure