Turbot Guardrails Hub 
Hub
Mods
Azure
45
Mods
139
Resource Types
2,961
Policies
1,527
Controls
103
Quick Actions
101
IAM

Policy: Azure > CIS v4.0 > 02 - Common Reference Recommendations > 02.01 - Secrets and Keys > 02.01.01 - Encryption Key Management > 02.01.01.02 - Customer Managed Keys (CMK) > 02.01.01.02.01 - Ensure Critical Data is Encrypted with Customer Managed Keys (CMK)

Configures auditing against a CIS Benchmark item.

Level: 2

Customer Managed Keys (CMK) provide additional control over encryption keys, including the ability to rotate, disable, and audit key usage.

By default, data at rest is encrypted using Microsoft managed keys. However, for increased control and regulatory compliance, Customer Managed Keys (CMK) stored in Azure Key Vault can be used.

Targets

This policy targets the following resource types:

Primary Policy

This policy is used with the following primary policy:

Controls

Setting this policy configures this control:

Policy Specification

Schema Type
string
Default
Per Azure > CIS v4.0 > 02 - Common Reference Recommendations > 02.01.01 - Encryption Key Management > 02.01.01.02 - Customer Managed Keys (CMK)
Valid Values [YAML]
  • >-
  Per Azure > CIS v4.0 > 02 - Common Reference Recommendations > 02.01.01 -
  Encryption Key Management > 02.01.01.02 - Customer Managed Keys (CMK)

  • Skip

  • Check: Benchmark using attestation

Category

In Your Workspace

Developers