azure-batch-keyvault

Ensure that Azure Batch account uses key vault to encrypt data

Examples

Insecure Example

resource "azurerm_batch_account" "example" {
  name                 = "testbatchaccount"
  resource_group_name  = azurerm_resource_group.example.name
  location             = azurerm_resource_group.example.location
  pool_allocation_mode = "BatchService"
  storage_account_id   = azurerm_storage_account.example.id
}

Secure Example

resource "azurerm_batch_account" "example" {
  name                 = "testbatchaccount"
  resource_group_name  = azurerm_resource_group.example.name
  location             = azurerm_resource_group.example.location
  pool_allocation_mode = "BatchService"
  storage_account_id   = azurerm_storage_account.example.id

  key_vault_reference {
    id  = "keyvault-id"
    url = "https://keyvault.url"
  }
}

More information

• Azure Docs
• Terraform Docs