Ensure Azure Data Explorer uses disk encryption
Error: Azure Data Explorer does not use disk encryption
Bridgecrew Policy ID: BC_AZR_GENERAL_26
Checkov Check ID: CKV_AZURE_74
Severity: LOW
Azure Data Explorer does not use disk encryption
Description
Enabling encryption at rest using a customer-managed key on your Azure Data Explorer cluster provides additional control over the key being used by the encryption at rest. This feature is oftentimes applicable to customers with special compliance requirements and requires a Key Vault to managing the keys.
Fix - Buildtime
Terraform
- Resource: azurerm_kusto_cluster
- Argument: enable_disk_encryption
resource "azurerm_kusto_cluster" "example" {
...
+ enable_disk_encryption = true
}
Updated about 1 year ago