Define the KMS key ID for encryption at rest. Encryption at Rest refers specifically to the encryption of data when written to an underlying storage system. This control determines whether the resource is encrypted at rest, and sets encryption to your desired level. The [Encryption at Rest](https://turbot.com/guardrails/docs/concepts/guardrails/encryption-at-rest) control compares the encryption settings against the encryption policies for the resource (`Azure &gt; Storage &gt; StorageAccount &gt; Encryption at Rest &gt; *`), raises an alarm, and takes the defined enforcement action Please make sure the key defined in the template has required permissions. **Note**: Ensure that the key vault key should assign `Key Vault Crypto Officer` role to the storage account.

Azure > Storage > Storage Account > Encryption at Rest

Define the KMS key ID for encryption at rest.&#92;n&#92;nEncryption at Rest refers specifically to the encryption of data when written to an underlying storage system. This control determines whether the resource is encrypted at rest, and sets encryption to your desired level.&#92;n&#92;nThe [Encryption at Rest](https://turbot.com/guardrails/docs/concepts/guardrails/encryption-at-rest) control compares the encryption settings against the encryption policies for the resource (`Azure &gt; Storage &gt; StorageAccount &gt; Encryption at Rest  &gt; *`), raises an alarm, and takes the defined enforcement action&#92;n&#92;nPlease make sure the key defined in the template has required permissions.&#92;n**Note**: Ensure that the key vault key should assign `Key Vault Crypto Officer` role to the storage account.&#92;n

Schema Type	`string`
Examples [YAML]	https://testvault.vault.azure.net/keys/turbot-default-key

Policy: Azure > Storage > Storage Account > Encryption at Rest > Customer Managed Key

Resource Types

Primary Policy

Controls

Policy Specification

Category

In Your Workspace

Developers