Control: Azure Synapse workspaces should use customer-managed keys to encrypt data at rest
Description
Use customer-managed keys to control the encryption at rest of the data stored in Azure Synapse workspaces. Customer-managed keys deliver double encryption by adding a second layer of encryption on top of the default encryption with service-managed keys.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.synapse_workspace_encryption_at_rest_using_cmk
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.synapse_workspace_encryption_at_rest_using_cmk --share
SQL
This control uses a named query:
synapse_workspace_encryption_at_rest_using_cmk