Azure Data Explorer cluster disk encryption is disabled misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_74
Category - Subcategory	Storage - Encryption
Provider	AZURE
Severity	LOW
Framework	ARM, Bicep, Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	4894f56b-6d71-40c9-82f9-660266a23439

Impact

Enabling encryption at rest using a customer-managed key on your Azure Data Explorer cluster provides additional control over the key being used by the encryption at rest. This feature is often applicable to customers with special compliance requirements and requires a Key Vault to managing the keys.

How to Fix

Resource: azurerm_kusto_cluster

• Arguments: enable_disk_encryption [source,go]

---

resource "azurerm_kusto_cluster" "example" { ...

• enable_disk_encryption = true }

---