last sync: 2025-Jul-01 17:24:08 UTC

Azure Machine Learning workspaces should be encrypted with the use of a customer-managed key

Azure BuiltIn Policy definition

Source Azure Portal
Display name Azure Machine Learning workspaces should be encrypted with the use of a customer-managed key
Id 7f40cee6-e933-4d0f-a782-b96615e0f4a6
Version 1.0.0
Details on versioning
Versioning Versions supported for Versioning: 1
1.0.0
Built-in Versioning [Preview]
Category Machine Learning
Microsoft Learn
Description Manage encryption at rest of Azure Machine Learning workspace data with customer-managed keys. By default, customer data is encrypted with service-managed keys, but customer-managed keys are commonly required to meet regulatory compliance standards. Customer-managed keys enable the data to be encrypted with an Azure Key Vault key created and owned by you. You have full control and responsibility for the key lifecycle, including rotation and management. Learn more at https://aka.ms/azureml-workspaces-cmk.
Cloud environments AzureCloud = true
AzureUSGovernment = unknown
AzureChinaCloud = unknown
Available in AzUSGov Unknown, no evidence if Policy definition is/not available in AzureUSGovernment
Mode Indexed
Type BuiltIn
Preview False
Deprecated False
Effect Default
AuditIfNotExists
Allowed
AuditIfNotExists, Disabled
RBAC role(s) none
Rule aliases THEN-ExistenceCondition (1)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.MachineLearningServices/workspaces/encryption.status Microsoft.MachineLearningServices workspaces properties.encryption.status True False
Rule resource types IF (1)
Compliance Not a Compliance control
Initiatives usage none
History
Date/Time (UTC ymd) (i) Change type Change detail
2025-06-19 17:23:14 add 7f40cee6-e933-4d0f-a782-b96615e0f4a6
JSON compare n/a
JSON
api-version=2021-06-01
EPAC