AzPolicyAdvertizer

last sync: 2025-Apr-29 17:16:02 UTC

Configure Azure AI Search services to enforce customer-managed keys to encrypt data at rest

Azure BuiltIn Policy definition

Source Azure Portal
Display name Configure Azure AI Search services to enforce customer-managed keys to encrypt data at rest
Id 356da939-f20a-4bb9-86f8-5db445b0e354
Version 1.0.1
Details on versioning
Versioning Versions supported for Versioning: 2
1.0.1
1.0.0
Built-in Versioning [Preview]
Category Search
Microsoft Learn
Description Enabling encryption at rest using a customer-managed key on your Azure AI Search services provides additional control over the key used to encrypt data at rest. This feature is often applicable to customers with special compliance requirements to manage data encryption keys using a key vault.
Cloud environments AzureCloud = true
AzureUSGovernment = unknown
AzureChinaCloud = unknown
Available in AzUSGov Unknown, no evidence if Policy definition is/not available in AzureUSGovernment
Mode Indexed
Type BuiltIn
Preview False
Deprecated False
Effect Default
Deny
Allowed
Deny, Disabled
RBAC role(s) none
Rule aliases IF (1)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.Search/searchServices/encryptionWithCmk.enforcement Microsoft.Search searchServices properties.encryptionWithCmk.enforcement True False
Rule resource types IF (1)
Compliance Not a Compliance control
Initiatives usage none
History
Date/Time (UTC ymd) (i) Change type Change detail
2025-04-04 18:50:38 change Patch (1.0.0 > 1.0.1)
2025-02-17 18:37:09 add 356da939-f20a-4bb9-86f8-5db445b0e354
JSON compare
compare mode: version left: version right:
JSON
api-version=2021-06-01
EPAC