Overview
This report reviews Encryption At-Rest across your selected Azure subscriptions using 43 enabled configuration and recommendation checks. It identifies affected resources and provides remediation guidance for failed checks.
Checks use the configuration and recommendations available for the selected subscriptions. Resources that cannot be evaluated are reported as unavailable or not applicable.
Assessment scope
- App Configuration — 1 checks
- App Service — 1 checks
- Automation — 1 checks
- Batch — 1 checks
- Cognitive Services — 1 checks
- Compute — 5 checks
- Container Instance — 1 checks
- Container Registry — 1 checks
- Container Service — 2 checks
- CosmosDB — 1 checks
- Data Box Edge — 1 checks
- Data Factory — 1 checks
- Data Lake Store — 1 checks
- Databricks — 1 checks
- EventHub — 1 checks
- HDInsight — 2 checks
- Healthcare APIs — 1 checks
- Kusto — 3 checks
- Machine Learning — 1 checks
- Monitor — 2 checks
- MySQL — 3 checks
- PostgreSQL — 2 checks
- SQL — 2 checks
- Service Bus — 1 checks
- Storage — 4 checks
- Storage Cache — 1 checks
- Synapse — 1 checks
Example checks
- Azure Kubernetes Services Cluster Nodes Temporary Disks and Caches are Encrypted At Host
- Azure Kubernetes Services Cluster Nodes Disk CMK Encrypted
- App Configuration CMK Encryption Should Be Enabled
- Automation Account Variables Should Be Encrypted
- Batch Accounts Should Be Encrypted With CMK
Upon completion, the report lists passed and failed checks, affected resources, unavailable evidence, and actionable remediation guidance.