Azure Compliance ControlsAzure Disk Storage
Managed disks should have 'Enable Data Access Authentication Mode' set to 'Checked'
Checks that managed disks use Azure Active Directory for data access authentication. When an export/upload URL is used, the system checks if the user has an identity in Azure Active Directory and has necessary permissions to export/upload the data.
What this control checks
Managed disks must have dataAccessAuthMode set to AzureActiveDirectory
Framework mappings
The clauses this control is mapped to in each framework.
- 8.6 Ensure that 'Enable Data Access Authentication Mode' is 'Checked'
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
compute_disk_data_access_auth_mode_enabled - Powerpipe Control:
azure_compliance.control.compute_disk_data_access_auth_mode_enabled - Azure Policy Definition:
c3921d55-b741-4d16-8d56-7f16e99e6892
Last reviewed: 2026-10-11