Azure Compliance ControlsAzure Data Lake Storage Gen1
Data Lake Store accounts should have encryption enabled
This policy ensures encryption is enabled on all Data Lake Store accounts. Checkov CKV_AZURE_105 expects `encryption_state` to be `Enabled` on `azurerm_data_lake_store`. Trivy AZU-0036 flags unencrypted data lake storage.
What this control checks
Checks the encryption setting on each Data Lake Store account
Framework mappings
The clauses this control is mapped to in each framework.
- 0304.09o3Organizational.1-09.o 09.07 Media Handling
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
datalake_store_account_encryption_enabled - Checkov Check:
CKV_AZURE_105 - Powerpipe Control:
azure_compliance.control.datalake_store_account_encryption_enabled - Azure Policy Definition:
a7ff3161-0087-490a-9ad9-ad6217f4f43a - Trivy Check:
AZU-0036
Last reviewed: 2026-10-11