New-AzStorageEncryptionScope
Cria um escopo de criptografia para uma conta de armazenamento.
Syntax
New-AzStorageEncryptionScope
[-ResourceGroupName] <String>
[-StorageAccountName] <String>
-EncryptionScopeName <String>
[-StorageEncryption]
[-RequireInfrastructureEncryption]
[-DefaultProfile <IAzureContextContainer>]
[-WhatIf]
[-Confirm]
[<CommonParameters>]
New-AzStorageEncryptionScope
[-ResourceGroupName] <String>
[-StorageAccountName] <String>
-EncryptionScopeName <String>
[-KeyvaultEncryption]
-KeyUri <String>
[-RequireInfrastructureEncryption]
[-DefaultProfile <IAzureContextContainer>]
[-WhatIf]
[-Confirm]
[<CommonParameters>]
New-AzStorageEncryptionScope
-StorageAccount <PSStorageAccount>
-EncryptionScopeName <String>
[-StorageEncryption]
[-RequireInfrastructureEncryption]
[-DefaultProfile <IAzureContextContainer>]
[-WhatIf]
[-Confirm]
[<CommonParameters>]
New-AzStorageEncryptionScope
-StorageAccount <PSStorageAccount>
-EncryptionScopeName <String>
[-KeyvaultEncryption]
-KeyUri <String>
[-RequireInfrastructureEncryption]
[-DefaultProfile <IAzureContextContainer>]
[-WhatIf]
[-Confirm]
[<CommonParameters>]
Description
O cmdlet New-AzStorageEncryptionScope cria um escopo de criptografia para uma conta de armazenamento.
Exemplos
Exemplo 1: Criar um escopo de criptografia com a Criptografia de Armazenamento
New-AzStorageEncryptionScope -ResourceGroupName "myresourcegroup" -AccountName "mystorageaccount" -EncryptionScopeName testscope -StorageEncryption
ResourceGroupName: myresourcegroup, StorageAccountName: mystorageaccount
Name State Source KeyVaultKeyUri RequireInfrastructureEncryption
---- ----- ------ -------------- -------------------------------
testscope Enabled Microsoft.Storage
Este comando cria um escopo de criptografia com a Criptografia de Armazenamento.
Exemplo 2: Criar um escopo de criptografia com Keyvault Encryption e RequireInfrastructureEncryption
New-AzStorageEncryptionScope -ResourceGroupName "myresourcegroup" -AccountName "mystorageaccount" `
-EncryptionScopeName testscope -KeyvaultEncryption -KeyUri "https://keyvalutname.vault.azure.net:443/keys/keyname/34a0ba563b4243d9a0ef2b1d3c0c7d57" `
-RequireInfrastructureEncryption
ResourceGroupName: myresourcegroup, StorageAccountName: mystorageaccount
Name State Source KeyVaultKeyUri RequireInfrastructureEncryption
---- ----- ------ -------------- -------------------------------
testscope Enabled Microsoft.Keyvault https://keyvalutname.vault.azure.net:443/keys/keyname/34a0ba563b4243d9a0ef2b1d3c0c7d57 True
Este comando cria um escopo de criptografia com Keyvault Encryption e RequireInfrastructureEncryption. A identidade da conta de armazenamento precisa ter permissões get,wrapkey,unwrapkey para a chave keyvault.
Parâmetros
-Confirm
Solicita a sua confirmação antes de executar o cmdlet.
Type: | SwitchParameter |
Aliases: | cf |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-DefaultProfile
As credenciais, a conta, o locatário e a assinatura usados para comunicação com o Azure.
Type: | IAzureContextContainer |
Aliases: | AzContext, AzureRmContext, AzureCredential |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-EncryptionScopeName
Criptografia de Armazenamento do AzureNome do escopo
Type: | String |
Aliases: | Name |
Position: | Named |
Default value: | None |
Required: | True |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-KeyUri
O Uri chave
Type: | String |
Position: | Named |
Default value: | None |
Required: | True |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-KeyvaultEncryption
Criar escopo de criptografia com keySource como Microsoft.Keyvault
Type: | SwitchParameter |
Position: | Named |
Default value: | None |
Required: | True |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-RequireInfrastructureEncryption
O escopo de criptografia aplicará uma camada secundária de criptografia com chaves gerenciadas pela plataforma para dados em repouso.
Type: | SwitchParameter |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-ResourceGroupName
Nome do Grupo de Recursos.
Type: | String |
Position: | 0 |
Default value: | None |
Required: | True |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-StorageAccount
Objeto da conta de armazenamento
Type: | PSStorageAccount |
Position: | Named |
Default value: | None |
Required: | True |
Accept pipeline input: | True |
Accept wildcard characters: | False |
-StorageAccountName
Nome da conta de armazenamento.
Type: | String |
Aliases: | AccountName |
Position: | 1 |
Default value: | None |
Required: | True |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-StorageEncryption
Crie o escopo de criptografia com keySource como Microsoft.Storage.
Type: | SwitchParameter |
Position: | Named |
Default value: | None |
Required: | True |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-WhatIf
Apresenta o que aconteceria mediante a execução do cmdlet. O cmdlet não é executado.
Type: | SwitchParameter |
Aliases: | wi |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Entradas
Saídas
Azure PowerShell
Comentários
https://aka.ms/ContentUserFeedback.
Brevemente: Ao longo de 2024, vamos descontinuar progressivamente o GitHub Issues como mecanismo de feedback para conteúdos e substituí-lo por um novo sistema de feedback. Para obter mais informações, veja:Submeter e ver comentários