Enable Infrastructure Double Encryption

More Info:

Ensure that infrastructure double encryption is enabled for your Azure PostgreSQL database servers in order to add a second layer of encryption for your PostgreSQL databases using a different encryption algorithm which provides enhanced data protection.

Risk Level

Medium

Address

Security

Compliance Standards

CISAZURE, CBP, HITRUST, GDPR, SOC2, NISTCSF, PCIDSS

Triage and Remediation

Remediation

Using Console

Using CLI

Using Python

To enable Infrastructure Double Encryption in Azure using Python, you can follow these steps:

Install the Azure SDK for Python using pip:
```
pip install azure-mgmt-storage
```

Import the necessary modules:

from azure.common.credentials import ServicePrincipalCredentials
from azure.mgmt.storage import StorageManagementClient
from azure.mgmt.storage.models import StorageAccountUpdateParameters
from azure.mgmt.storage.models import Encryption
from azure.mgmt.storage.models import EncryptionService
from azure.mgmt.storage.models import EncryptionServiceType

Set up the Azure credentials:

credentials = ServicePrincipalCredentials(
    client_id='<client-id>',
    secret='<client-secret>',
    tenant='<tenant-id>'
)

Create a StorageManagementClient object:

storage_client = StorageManagementClient(credentials, subscription_id)

Get the storage account that you want to enable Infrastructure Double Encryption for:

storage_account = storage_client.storage_accounts.get_properties(resource_group_name, account_name)

Create an Encryption object with the necessary properties:

encryption = Encryption(
    services=[
        EncryptionService(
            service=EncryptionServiceType.blob,
            enabled=True
        ),
        EncryptionService(
            service=EncryptionServiceType.file,
            enabled=True
        )
    ]
)

Create a StorageAccountUpdateParameters object with the Encryption object:

update_params = StorageAccountUpdateParameters(
    encryption=encryption
)

Update the storage account with the StorageAccountUpdateParameters object:

storage_client.storage_accounts.update(resource_group_name, account_name, update_params)

These steps will enable Infrastructure Double Encryption for the specified storage account in Azure using Python.

Azure Introduction

Azure Pricing

Azure Threats

Azure Misconfigurations

Enable Infrastructure Double Encryption

More Info:

Risk Level

Address

Compliance Standards

Triage and Remediation

Remediation

Azure Introduction

Azure Pricing

Azure Threats

Azure Misconfigurations

​More Info:

​Risk Level

​Address

​Compliance Standards

​Triage and Remediation

​Remediation

More Info:

Risk Level

Address

Compliance Standards

Triage and Remediation

Remediation