mysql encryption at rest (CKV_AZURE_96)

[chielboogaard]

Describe the issue CKV_AZURE_96 is giving back: Ensure that MySQL server enables infrastructure encryption. This is already on by default as the microsoft documentation states the following:

At-rest

The Azure Database for MySQL service uses the FIPS 140-2 validated cryptographic module for storage encryption of data at-rest. Data, including backups, are encrypted on disk, including the temporary files created while running queries. The service uses the AES 256-bit cipher included in Azure storage encryption, and the keys are system managed. Storage encryption is always on and can't be disabled.

source: https://learn.microsoft.com/en-us/azure/mysql/single-server/concepts-security

see bicep example:

Examples

resource _mySQLServer 'Microsoft.DBforMySQL/flexibleServers@2022-01-01' = {
  name: toLower(format(subNameInfixInfra, 'MSS', Number))
  location: Location
  tags: Tags
  sku: Sku
  properties: {
    administratorLogin: AdministratorLogin
    administratorLoginPassword: AdministratorLoginPassword
    createMode: CreateMode
  }
}

Version (please complete the following information):

• 3.1.17

Additional context Add any other context about the problem here.

[JamesWoolfenden]

still seems to be an active check for azure policy https://learn.microsoft.com/en-us/azure/mysql/single-server/policy-reference