Skip to main content

Remediation

From Azure Portal​

  1. During Storage Account creation, in the Encryption tab, check the box next to Enable infrastructure encryption.

From Azure CLI​

Replace the information within {{}} with appropriate values:

az storage account create \
    --name {{storage-account-name}} \
    --resource-group {{resource-group-name}} \
    --location {{location}} \
    --sku Standard_RAGRS \
    --kind StorageV2 \
    --require-infrastructure-encryption

From PowerShell​

Replace the information within {{}} with appropriate values:

New-AzStorageAccount `
    -ResourceGroupName {{resource-group-name}} `
    -AccountName {{storage-account-name}} `
    -Location {{location}} `
    -SkuName "Standard_RAGRS" `
    -Kind StorageV2 `
    -RequireInfrastructureEncryption

Enabling Infrastructure Encryption after Storage Account Creation​

If infrastructure encryption was not enabled on blob storage creation, there is no official way to enable it. Please see the additional information section.