Azure Compliance ControlsAzure HDInsight
HDInsight clusters should have encryption in transit enabled for communication between cluster nodes
Data can be tampered with during transmission between Azure HDInsight cluster nodes. Enabling encryption in transit addresses problems of misuse and tampering during this transmission. The check looks at `Microsoft.HDInsight/clusters`.
What this control checks
HDInsight clusters must have encryption in transit enabled for communication between cluster nodes
Framework mappings
The clauses this control is mapped to in each framework.
- SC-8(1): Cryptographic Protection
- Transmission Confidentiality And Integrity (SC-8)
FedRAMP Moderate Baseline Rev 4
- SC-8 (1): Cryptographic Or Alternate Physical Protection
- SC-8(1) Cryptographic Or Alternate Physical Protection
- 3.13.8: Implement cryptographic mechanisms to prevent unauthorized disclosure of CUI during transmission unless otherwise protected by alternative physical safeguards.
- SC.L2-3.13.8 Implement cryptographic mechanisms to prevent unauthorized disclosure of CUI during transmission unless otherwise protected by alternative physical safeguards
- SC-8 Transmission Confidentiality And Integrity
- SC-8(1) Cryptographic Or Alternate Physical Protection
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
hdinsight_cluster_encryption_in_transit_enabled - Powerpipe Control:
azure_compliance.control.hdinsight_cluster_encryption_in_transit_enabled - Azure Policy Definition:
d9da03a1-f3c3-412a-9709-947156872263
Last reviewed: 2026-10-13