Control: Azure > SQL > Database > Encryption at Rest

Define the Encryption at Rest settings required for Azure > SQL > Database.

Encryption at Rest refers specifically to the encryption of data when written to an underlying storage system. This control determines whether the resource is encrypted at rest, and sets encryption.

The Encryption at Rest control compares the encryption settings against the encryption policies for the resource (Azure > SQL > Database > Encryption at Rest), raises an alarm, and takes the defined enforcement action.

Resource Types

This control targets the following resource types:

Azure > SQL > Database

Policies

The following policies can be used to configure this control:

Azure > SQL > Database > Encryption at Rest

Permissions

Cloud permissions used by this control and its actions:

microsoft.sql/servers/databases/transparentdataencryption/write

In Your Workspace

Developers

Control Type URI

tmod:@turbot/azure-sql#/control/types/databaseEncryptionAtRest

Category URI

tmod:@turbot/turbot#/control/categories/resourceEncryptionAtRest

GraphQL

query controlType(id: "tmod:@turbot/azure-sql#/control/types/databaseEncryptionAtRest") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/azure-sql#/control/types/databaseEncryptionAtRest'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/azure-sql#/control/types/databaseEncryptionAtRest"