Skip to content

Enable encryption at host for virtual machine scale sets and virtual machines #505

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Omkar-Mohite96 wants to merge 12 commits into
base: main
Choose a base branch
from
Open

Enable encryption at host for virtual machine scale sets and virtual machines #505

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
12 commits
Select commit Hold shift + click to select a range
cb57502
Code changes to enable encryption at host for virtual machine scale s…
Omkar-Mohite96 Apr 21, 2025
0898bb6
Updated minor changes
Omkar-Mohite96 Apr 23, 2025
0315dd4
code changes for vmss
Omkar-Mohite96 Apr 25, 2025
1ab7aa0
code changes for extra checks
Omkar-Mohite96 Apr 30, 2025
94be9b3
Update Remediate-EnableEncrytionAtHostForVMSS.ps1
Omkar-Mohite96 Apr 30, 2025
e86d437
readme file updated
Omkar-Mohite96 May 13, 2025
4932acf
zip file changed for new scripts
Omkar-Mohite96 May 19, 2025
a7c7723
readme file updated
Omkar-Mohite96 May 20, 2025
aed96ff
filter condition changed
Omkar-Mohite96 May 22, 2025
71e133d
Merge branch 'main' of https://github.com/azsk/AzTS-docs into users/o…
Omkar-Mohite96 May 23, 2025
053a6d1
readme file changes
Omkar-Mohite96 May 23, 2025
08e7160
code changes
Omkar-Mohite96 Jun 5, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 11 additions & 0 deletions Scripts/RemediationScripts/ControlRemediationSpecification.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -568,6 +568,17 @@
"SubscriptionId"
]
}
},
{
"ControlId": "Azure_VirtualMachineScaleSet_DP_Enable_Encryption_At_Host",
"EnableRemediation": "true",
"RemediationScriptUrl": "https://raw.githubusercontent.com/azsk/AzTS-docs/main/Scripts/RemediationScripts/Remediate-EnableEncrytionAtHostForVMSS.ps1",
"LoadCommand": "Remediate-EnableEncrytionAtHostForVMSS.ps1",
"InitCommand": "Enable-EncrytionAtHost",
"RollbackMetadata": {
"RollbackCommand": "Disable-EncrytionAtHost",
"Arguments": ["SubscriptionId", "Path"]
Copy link
Contributor

@Aboli-msft Aboli-msft May 20, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

why Path is needed here?

Copy link
Contributor Author

@Omkar-Mohite96 Omkar-Mohite96 May 21, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's file path, where we backup the remediated resources list in .json file.
SO, when user want to rollback the operations, user need to give file Path as argument.

}
}
]
}
13 changes: 13 additions & 0 deletions Scripts/RemediationScripts/ControlsEligibleForRemediationThroughUI.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -87,6 +87,8 @@

43. [Azure_AISearch_AuthN_Use_Managed_Service_Identity](ControlsEligibleForRemediationThroughUI.md#43-Azure_AISearch_AuthN_Use_Managed_Service_Identity)

43. [Azure_AISearch_AuthN_Use_Managed_Service_Identity](ControlsEligibleForRemediationThroughUI.md#43-Azure_VirtualMachineScaleSet_DP_Enable_Encryption_At_Host)

<br />
___

Expand Down Expand Up @@ -648,3 +650,14 @@ Managed Service Identity (MSI) must be used in Azure AI Search
Contributor or higher privileged role on Subscription.
___

## 44. Azure_VirtualMachineScaleSet_DP_Enable_Encryption_At_Host

### Display Name
Encryption at Host must be enabled for Virtual machine scale sets and underlying Virtual machines in flexible orchestration mode.

### Link to Bulk Remediation Script (BRS)
[Remediate-EnableEncrytionAtHostForVMSS.ps1](Remediate-EnableEncrytionAtHostForVMSS.ps1)

### Minimum permissions required to run the script
Contributor or higher privileged role on Subscription.
___
19 changes: 19 additions & 0 deletions Scripts/RemediationScripts/Readme.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1555,6 +1555,25 @@ Yes
### Supports rollback?
Yes

___

## 76. Azure_VirtualMachineScaleSet_DP_Enable_Encryption_At_Host

### Display Name
This script is used to Enable Encryption at Host for Virtual machine scale sets and underlying Virtual machines in flexible orchestration mode.

### Link to Bulk Remediation Script (BRS)
[Enable-EncrytionAtHost](Remediate-EnableEncrytionAtHostForVMSS.ps1)

### Minimum permissions required to run the script
Contributor or higher privileged role on Subscription.

### [Supports managed identity](Readme.md#supports-managed-identity-based-remediations) based remediation
Yes

### Supports rollback?
Yes

---
## Supports managed identity based remediations
Both System assigned and User assigned managed identities are supported.
Expand Down
Loading