Checks/Azure/Test-VmEnsureAttachedDisksEncryptedWithCmk.ps1
|
function Test-VmEnsureAttachedDisksEncryptedWithCmk { <# .SYNOPSIS Ensure that 'OS and Data' disks are encrypted with Customer Managed Key (CMK) .DESCRIPTION Ensure that OS disks (boot volumes) and data disks (non-boot volumes) are encrypted with CMK (Customer Managed Keys). Customer Managed keys can be either ADE or Server Side Encryption (SSE). .PARAMETER Check CIEMCheck object containing check metadata. #> [CmdletBinding()] [OutputType([PSCustomObject[]])] param( [Parameter(Mandatory)] [CIEMCheck]$Check ) $ErrorActionPreference = 'Stop' # TODO: Implement check logic based on Prowler check: vm_ensure_attached_disks_encrypted_with_cmk [CIEMScanResult]::Create($Check, 'MANUAL', 'This check requires manual implementation. See Prowler check vm_ensure_attached_disks_encrypted_with_cmk for reference.', 'N/A', 'vm Resources') } |