diff --git a/en/azure/storageaccounts/blob-service-encryption.md b/en/azure/storageaccounts/blob-service-encryption.md index a3f0b79c5..c8e5d1eb3 100644 --- a/en/azure/storageaccounts/blob-service-encryption.md +++ b/en/azure/storageaccounts/blob-service-encryption.md @@ -16,16 +16,15 @@ ## Detailed Remediation Steps -1. Log into the Microsoft Azure Management Console. -2. Select the "Search resources, services, and docs" option at the top and search for "Storage account."
-3. On the "Storage account" page, scroll down the left navigation panel and choose "Containers" under the "Blob services."
-4. Select the "Container" on the "Containers" page.
-5. Scroll down the "Storage account" navigation panel and choose "Encryption" option under the "Settings."
-6. On the "Encryption page" scroll down and check "Use your own key" setting configuration. If "Use your own key" setting checkbox is not checked, then "BYOK encryption" is not configured in the Blob Service Encryption.
-7. Repeat steps number 2 - 5 to verify other "Blob Service Encryption" in the Azure account.
-8. Navigate to "Storage account", select the corresponding "Storage account", scroll down the left navigation panel and choose "Encryption."
-9. On the "Encyption page" select the "Use your own key" and click on the "Select from Key Vault".
-10. On the "Key vault" option select the vault accordingly.
-11. On the "Encryption key" option select the key accordingly.
-12. Click on the "Save" option at the top to make the changes.
-13. Repeat steps number 8 - 12 to ensure the Storage Account used by Activity Logs is configured with a BYOK key.
+1. Log in to the Microsoft Azure Management Console. +2. Select the "Search resources, services, and docs" option at the top and search for "Storage accounts."
+3. On the "Storage account" page, select the account by clicking on its "Name".
+4. On the configuration page scroll down the left navigation panel and select "Containers" under "Data Storage."
+5. Select the "Container" on the "Containers" page.
+6. Scroll down the "Storage account" navigation panel and select "Encryption" under "Security + networking."
+7. On the "Encryption page" scroll down and check the "Encryption type". If "Microsoft-managed keys" is selected, then "BYOK encryption" is not configured in the Blob Service Encryption.
+8. To enable "BYOK encryption" select "Encryption type" as "Customer-managed keys". In the "Encryption key" select option "Select from key vault".
+9. In the "Key Vault and key" click on the blue hughlighted text "Select a key vault and key".
+10. On the "Select a key" page, select "Key store type" as "Key vault". In the "Key vault" and "key" options, select the key vault and key from the dropdown or you can create your own key vault and key. Click "Select" button at the end to save the selected options.
+11. Click on the "Save" button at the end to make the changes.
+12. Repeat step number 3 - 11 to ensure the Storage Account used by Blob Services is configured with a BYOK key.
diff --git a/resources/azure/storageaccounts/blob-service-encryption/step10.png b/resources/azure/storageaccounts/blob-service-encryption/step10.png index e3921d0c2..ed0645f43 100644 Binary files a/resources/azure/storageaccounts/blob-service-encryption/step10.png and b/resources/azure/storageaccounts/blob-service-encryption/step10.png differ diff --git a/resources/azure/storageaccounts/blob-service-encryption/step11.png b/resources/azure/storageaccounts/blob-service-encryption/step11.png index 500083a34..b2d7a8673 100644 Binary files a/resources/azure/storageaccounts/blob-service-encryption/step11.png and b/resources/azure/storageaccounts/blob-service-encryption/step11.png differ diff --git a/resources/azure/storageaccounts/blob-service-encryption/step12.png b/resources/azure/storageaccounts/blob-service-encryption/step12.png deleted file mode 100644 index 61887ef0c..000000000 Binary files a/resources/azure/storageaccounts/blob-service-encryption/step12.png and /dev/null differ diff --git a/resources/azure/storageaccounts/blob-service-encryption/step2.png b/resources/azure/storageaccounts/blob-service-encryption/step2.png index fbfebb3b2..c60a8eeee 100644 Binary files a/resources/azure/storageaccounts/blob-service-encryption/step2.png and b/resources/azure/storageaccounts/blob-service-encryption/step2.png differ diff --git a/resources/azure/storageaccounts/blob-service-encryption/step3.png b/resources/azure/storageaccounts/blob-service-encryption/step3.png index 367677e38..bc9999d07 100644 Binary files a/resources/azure/storageaccounts/blob-service-encryption/step3.png and b/resources/azure/storageaccounts/blob-service-encryption/step3.png differ diff --git a/resources/azure/storageaccounts/blob-service-encryption/step4.png b/resources/azure/storageaccounts/blob-service-encryption/step4.png index ba7506410..ba855f9ea 100644 Binary files a/resources/azure/storageaccounts/blob-service-encryption/step4.png and b/resources/azure/storageaccounts/blob-service-encryption/step4.png differ diff --git a/resources/azure/storageaccounts/blob-service-encryption/step5.png b/resources/azure/storageaccounts/blob-service-encryption/step5.png index e9455e633..fd15dc551 100644 Binary files a/resources/azure/storageaccounts/blob-service-encryption/step5.png and b/resources/azure/storageaccounts/blob-service-encryption/step5.png differ diff --git a/resources/azure/storageaccounts/blob-service-encryption/step6.png b/resources/azure/storageaccounts/blob-service-encryption/step6.png index c75653f64..b83d94238 100644 Binary files a/resources/azure/storageaccounts/blob-service-encryption/step6.png and b/resources/azure/storageaccounts/blob-service-encryption/step6.png differ diff --git a/resources/azure/storageaccounts/blob-service-encryption/step7.png b/resources/azure/storageaccounts/blob-service-encryption/step7.png new file mode 100644 index 000000000..662b1d742 Binary files /dev/null and b/resources/azure/storageaccounts/blob-service-encryption/step7.png differ diff --git a/resources/azure/storageaccounts/blob-service-encryption/step8.png b/resources/azure/storageaccounts/blob-service-encryption/step8.png index 7021aa762..766ef5160 100644 Binary files a/resources/azure/storageaccounts/blob-service-encryption/step8.png and b/resources/azure/storageaccounts/blob-service-encryption/step8.png differ diff --git a/resources/azure/storageaccounts/blob-service-encryption/step9.png b/resources/azure/storageaccounts/blob-service-encryption/step9.png index 6ff1b0364..554fbd5bd 100644 Binary files a/resources/azure/storageaccounts/blob-service-encryption/step9.png and b/resources/azure/storageaccounts/blob-service-encryption/step9.png differ