/
Azure-StorageAccounts-Blob-Service-Encryption

Azure-StorageAccounts-Blob-Service-Encryption

Severity : High

Description : Blob Services can be configured to encrypt data-at-rest. By default Azure will create a set of keys to encrypt Blob Services, but the recommended approach is to create your own keys using Azure Key Vault.

Remediation Steps : Ensure that Blob Service is configured to use a customer-provided key vault key.

Related content

Azure-StorageAccounts-Storage-Accounts-AAD-Enabled
Azure-StorageAccounts-Storage-Accounts-AAD-Enabled
More like this
AWS-S3-S3-Bucket-Encryption-Enforcement
AWS-S3-S3-Bucket-Encryption-Enforcement
More like this
AWS-EC2-EBS-Encryption-Enabled-By-Default
AWS-EC2-EBS-Encryption-Enabled-By-Default
More like this
Azure-VirtualMachines-VM-Managed-Disks-Enabled
Azure-VirtualMachines-VM-Managed-Disks-Enabled
More like this
AWS-EC2-EBS-Encryption-Enabled
AWS-EC2-EBS-Encryption-Enabled
More like this
AWS-EC2-EBS-Encrypted-Snapshots
AWS-EC2-EBS-Encrypted-Snapshots
More like this

Blue Hexagon Proprietary