Azure / Azure/Azure-Landing-Zones
Support for Enabling/Disabling Infrastructure Encryption in Storage Account during Bootstrap
- Dominant language
- PowerShell
- Stars
- 97
- Forks
- 70
- Avg merge
- 3d 1h
- Merged PRs (30d)
- 7
Description
### Is there an existing issue for this?
- [x] I have searched the existing issues
### Infrastructure as Code Type? (Required)
terraform
### Starter Module? (Required)
terraform - platform_landing_zone
### Use Case (Required)
Organizations should have the ability to configure Infrastructure Encryption for Storage Account during the Bootstrap process. Specifically, users should be able to set Infrastructure Encryption to either true or false based on their security requirements.
In my scenario, our organizational policy recommends enabling Infrastructure Encryption during the Bootstrap phase. However, the current framework does not provide an option to enable this setting, limiting our ability to align the deployment with our security standards.
### Proposed Solution (Required)
A configurable flag should be added to inputs.yaml that allows users to explicitly set the Infrastructure Encryption option to either true or false.
### Important Factoids (Optional)
_No response_
### References (Optional)
_No response_
Contributor guide
Research direction
Start in the terraform platform_landing_zone Bootstrap flow and trace how inputs.yaml values reach the Storage Account configuration. Add a configurable Infrastructure Encryption flag that accepts true or false, then verify that Bootstrap applies the selected setting.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure, terraform
- Domain
- cloud, infrastructure
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 48/100