Validate Managed Disk

[jackfrancis]

It seems that our managed disk implementation doesn't include encryption at REST. In addition, the standard docs suggest we're on an old API version.

The scope of this is to document any gaps in our current Managed Disk implementation.

See:

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/managed-disks-overview

[ghost]

It seems that Managed disks are encrypted by REST by default.

Starting June 10th, 2017, all new managed disks/snapshots/images and new data written to existing managed disks are automatically encrypted-at-rest with keys managed by Microsoft by default.

Managed disks already has SSE enabled by default. (which is good enough for compliances)
It does not have ADE enabled. Is that what this issue is referring to?

Source : https://azure.microsoft.com/en-us/blog/azure-managed-disks-sse/
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/managed-disks-overview

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.