Policy Packs

guardrails-samples

Ensures that data remains confidential and secure, even if the physical storage media is compromised.

Enforce Encryption at Rest Is Enabled for Azure Compute Disks

main

azure_compute_disk_encryption_at_rest

Define the Encryption at Rest settings required for `Azure &gt; Compute &gt; Disk`.&#92;n&#92;nEncryption at Rest refers specifically to the encryption of data when written to an underlying storage system. This control determines whether the resource is encrypted at rest, and sets encryption.&#92;n&#92;nThe [Encryption at Rest](https://turbot.com/guardrails/docs/concepts/guardrails/encryption-at-rest) control compares the encryption settings against the encryption policies for the resource (`Azure &gt; Compute &gt; Disk &gt; Encryption at Rest`), raises an alarm, and takes the defined enforcement action.&#92;n

diskEncryptionAtRest

Azure > Compute > Disk > Encryption at Rest

azure_compute_disk_encryption_at_rest_disk_encryption_set

Define the Disk Encryption Set ID for encryption at rest.&#92;n&#92;nEncryption at Rest refers specifically to the encryption of data when written to an underlying storage system. This control determines whether the resource is encrypted at rest, and sets encryption to your desired level.&#92;n&#92;nThe [Encryption at Rest](https://turbot.com/guardrails/docs/concepts/guardrails/encryption-at-rest) control compares the encryption settings against the encryption policies for the resource (`Azure &gt; Compute &gt; Disk &gt; Encryption at Rest  &gt; *`), raises an alarm, and takes the defined enforcement action&#92;n&#92;nPlease make sure the key defined in the template has required permissions.&#92;n&#92;n```&#92;nexample:&#92;n  /subscriptions/cd4401c4-3cc8-4565-a594-839c1e345f1e/resourceGroups/madhushree_test/providers/Microsoft.Compute/diskEncryptionSets/test-disk-encryption-set-cis&#92;n```&#92;n

diskEncryptionAtRestDiskEncryptionSet

Azure > Compute > Disk > Encryption at Rest > Disk Encryption Set

turbot_policy_setting.azure_compute_disk_encryption_at_rest

turbot_policy_setting.azure_compute_disk_encryption_at_rest_disk_encryption_set

Policy	Setting	Note
Azure > Compute > Disk > Encryption at Rest	Check: Encryption at Rest > Disk Encryption Set
Azure > Compute > Disk > Encryption at Rest > Disk Encryption Set	/subscriptions/cd1234c5-6cc7-8901-a234-567c8e901f2e/resourceGroups/myResourceGroup/providers/Microsoft.Compute/diskEncryptionSets/myDiskEncryptionSet

Policy Settings