CmdID

CmdID / az / az storage / az storage account / az storage account encryption-scope

az storage account encryption-scope update

Update properties for specified encryption scope within storage account. Azure CLI reference

4 examples 4 options Its page in the Azure CLI reference

Opens CmdID with your command. It is read in your browser and sent nowhere.

Examples

from the Azure CLI, each command read by CmdID

Update an encryption scope key source to Microsoft.Storage.

az storage account encryption-scope update --name myencryption -s Microsoft.Storage --account-name mystorageaccount -g MyResourceGroupIdentify
--nameThe name of the encryption scope within the specified storage account.
-sThe provider for the encryption scope.
--account-nameThe storage account name.
-gName of resource group.

Create an encryption scope within storage account based on Microsoft.KeyVault key source.

az storage account encryption-scope update --name myencryption -s Microsoft.KeyVault -u "https://vaultname.vault.azure.net/keys/keyname/1f7fa7edc99f4cdf82b5b5f32f2a50a7" --account-name mystorageaccount -g MyResourceGroupIdentify
--nameThe name of the encryption scope within the specified storage account.
-sThe provider for the encryption scope.
-uThe object identifier for a key vault key object.
--account-nameThe storage account name.
-gName of resource group.

Disable an encryption scope within storage account.

az storage account encryption-scope update --name myencryption --state Disabled --account-name mystorageaccount -g MyResourceGroupIdentify
--nameThe name of the encryption scope within the specified storage account.
--stateChange the state the encryption scope.
--account-nameThe storage account name.
-gName of resource group.

Enable an encryption scope within storage account.

az storage account encryption-scope update --name myencryption --state Enabled --account-name mystorageaccount -g MyResourceGroupIdentify
--nameThe name of the encryption scope within the specified storage account.
--stateChange the state the encryption scope.
--account-nameThe storage account name.
-gName of resource group.

Options

4 in the Azure CLI reference
--key-source, -sThe provider for the encryption scope.
--key-uri, -uThe object identifier for a key vault key object.
--require-infrastructure-encryption, -iA boolean indicating whether or not the service applies a secondary layer of encryption with platform managed keys for data at rest.
--stateChange the state the encryption scope.