Azure Data Explorer cluster disk encryption is disabled

Description

Enabling encryption at rest using a customer-managed key on your Azure Data Explorer cluster provides additional control over the key being used by the encryption at rest. This feature is often applicable to customers with special compliance requirements and requires a Key Vault to managing the keys.

Code Example

resource "azurerm_kusto_cluster" "example" {
    ...
  + enable_disk_encryption = true
}

Remediation

Terraform

• Resource: azurerm_kusto_cluster
• Arguments: enable_disk_encryption

Rule Details

Field	Value
ID	IAC-0582
Severity	INFO
IaC Type	arm
Frameworks	Terraform, TerraformPlan
Checkov ID	CKV_AZURE_74

References

• Checkov Rule

---