App Configuration Encryption At Rest with CMK

MEDIUM
Source
CloudSploit
ID
app-configuration-encryption-at-rest-with-cmk

App Configuration Encryption At Rest with CMK

Ensures that Azure App Configuration stores are encrypted with CMK.

App Configuration encrypts sensitive information at rest by default using Azure managed key. The use of customer-managed keys provides enhanced data protection by allowing you to manage your encryption keys. When managed key encryption is used, all sensitive information in App Configuration is encrypted with a user-provided Azure Key Vault key.

Ensure that Azure App Configuration store has CMK encryption enabled.