AzPolicyAdvertizer

last sync: 2023-Dec-06 18:52:29 UTC

Azure Policy definition

Storage account encryption scopes should use double encryption for data at rest

Source Azure Portal
Display name Storage account encryption scopes should use double encryption for data at rest
Id bfecdea6-31c4-4045-ad42-71b9dc87247d
Version 1.0.0
Details on versioning
Category Storage
Microsoft Learn
Description Enable infrastructure encryption for encryption at rest of your storage account encryption scopes for added security. Infrastructure encryption ensures that your data is encrypted twice.
Mode All
Type BuiltIn
Preview False
Deprecated False
Effect Default
Audit
Allowed
Audit, Deny, Disabled
RBAC role(s) none
Rule aliases IF (1)
Alias Namespace ResourceType DefaultPath Modifiable
Microsoft.Storage/storageAccounts/encryptionScopes/requireInfrastructureEncryption Microsoft.Storage storageAccounts/encryptionScopes properties.requireInfrastructureEncryption false
Rule resource types IF (1)
Microsoft.Storage/storageAccounts/encryptionScopes
Compliance
The following 1 compliance controls are associated with this Policy definition 'Storage account encryption scopes should use double encryption for data at rest' (bfecdea6-31c4-4045-ad42-71b9dc87247d)
Control Domain Control Name MetadataId Category Title Owner Requirements Description Info Policy#
RBI_ITF_NBFC_v2017 3.1.h RBI_ITF_NBFC_v2017_3.1.h RBI IT Framework 3.1.h Information and Cyber Security Public Key Infrastructure (PKI)-3.1 n/a The IS Policy must provide for a IS framework with the following basic tenets: Public Key Infrastructure (PKI) - NBFCs may increase the usage of PKI to ensure confidentiality of data, access control, data integrity, authentication and nonrepudiation. link 32
Initiatives usage
Initiative DisplayName Initiative Id Initiative Category State Type
[Preview]: Reserve Bank of India - IT Framework for NBFC 7f89f09c-48c1-f28d-1bd5-84f3fb22f86c Regulatory Compliance Preview BuiltIn
History
Date/Time (UTC ymd) (i) Change type Change detail
2021-08-23 14:26:16 add bfecdea6-31c4-4045-ad42-71b9dc87247d
JSON compare n/a
JSON
api-version=2021-06-01
EPAC