HIGH
Source
CloudSploit
ID
blob-container-cmk-encrypted

Blob Container CMK Encrypted

Ensures that blob containers in storage account are CMK encrypted

Azure allows you to encrypt data in your blob containers using customer-managed keys (CMK) instead of using platform-managed keys, which are enabled by default. Configuring a customer-managed key for blob services ensures protection and control access to the key that encrypts your data. Customer-managed keys offer greater flexibility to manage access controls.

Ensure that all blob containers in storage account store has CMK encryption enabled.