MEDIUM
Source
CloudSploit
ID
batch-account-cmk-encrypted

Batch Account CMK Encrypted

Ensures that Azure Batch accounts are CMK encrypted.

Azure Batch allows you to encrypt data in your accounts using customer-managed keys (CMK) instead of using platform-managed keys, which are enabled by default. Using CMK encryption offers enhanced security and compliance, allowing centralized management and control of encryption keys through Azure Key Vault.

Enable CMK encryption for all Azure Batch accounts.