Ensure Azure data factories are encrypted with a customer-managed key

Error: Azure data factories are not encrypted with a customer-managed key

Bridgecrew Policy ID: BC_AZR_GENERAL_35
Checkov Check ID: CKV2_AZURE_15
Severity: LOW

Azure data factories are not encrypted with a customer-managed key

Description

TBA. Customer-managed Key (CMK)

Fix - Buildtime

Terraform

  • Resource: azurerm_data_factory, azurerm_data_factory_linked_service_key_vault
  • Argument: data_factory_name (of azurerm_data_factory_linked_service_key_vault )
resource "azurerm_data_factory" "data_factory_good" {
  name                = "example"
  location            = "location"
  resource_group_name = "group"
}

resource "azurerm_data_factory_linked_service_key_vault" "factory_good" {
  name                = "example"
  resource_group_name = "example"
  data_factory_name   = azurerm_data_factory.data_factory_good.name
  key_vault_id        = "123456"
}

Did this page help you?