Plugin Title File Service Encryption
Cloud AZURE
Category Storage Accounts
Description Ensures data encryption is enabled for File Services
More Info File Service encryption protects your data at rest. Azure Storage encrypts your data and automatically decrypts it for you as you access it.
AWS Link https://docs.microsoft.com/en-us/azure/storage/common/storage-service-encryption
Recommended Action Ensure that data encryption is enabled for each File Service.


Detailed Remediation Steps

  1. Log into the Microsoft Azure Management Console.
  2. Select the "Search resources, services, and docs" option at the top and search for "Storage account."
  3. On the "Storage account" page, scroll down the left navigation panel and choose "File shares" under the "File Service."
  4. Select the "File share" on the "File sharing" page and check the storage account name at the top.
  5. Scroll down the "Storage account" navigation panel and choose "Encryption" option under the "Settings."
  6. On the "Encryption page" scroll down and check "Use your own key" setting configuration. If "Use your own key" setting checkbox is not checked, then "BYOK encryption" is not configured in the File Service Encryption.
  7. Repeat steps number 2 - 5 to verify other "File Service Encryption" in the Azure account.
  8. Navigate to "Storage account", select the corresponding "Storage account", scroll down the left navigation panel and choose "Encryption."
  9. On the "Encyption page" select the "Use your own key" and click on the "Select from Key Vault".
  10. On the "Key vault" option select the vault accordingly.
  11. On the "Encryption key" option select the key accordingly.
  12. Click on the "Save" option at the top to make the changes.
  13. Repeat steps number 8 - 12 to ensure that data encryption is enabled for each File Service.

Want to scan for this risk automatically?

Get Started Now