Devolutions.CIEM

0.3.29

Checks/Azure/Test-SqlserverTdeEncryptedWithCmk.ps1

                                function Test-SqlserverTdeEncryptedWithCmk {

    <#

    .SYNOPSIS

        SQL server uses a customer-managed key for the TDE protector and all databases have TDE enabled

    .DESCRIPTION

        **Azure SQL Server** uses **Transparent Data Encryption** with a **customer-managed key** in Azure Key Vault, and each database has TDE `Enabled`

    .PARAMETER Check

        CIEMCheck object containing check metadata.

    #>

    [CmdletBinding()]

    [OutputType([PSCustomObject[]])]

    param(

        [Parameter(Mandatory)]

        [CIEMCheck]$Check

    )

    $ErrorActionPreference = 'Stop'

    # TODO: Implement check logic based on Prowler check: sqlserver_tde_encrypted_with_cmk

    [CIEMScanResult]::Create($Check, 'MANUAL', 'This check requires manual implementation. See Prowler check sqlserver_tde_encrypted_with_cmk for reference.', 'N/A', 'sqlserver Resources')

}