Cognitive Services Accounts Should Enable Data Encryption

Description:

This policy audits any Cognitive Services account not using data encryption. For each Cognitive Services account with storage, should enable data encryption with either customer managed or Microsoft managed key.

Solution: 

To enable encryption for Cognitive Services:
1. In the Azure portal, open Cognitive Services,
2. Select an item from the list, and open the "encryption" page,
3. Setup encryption using either Microsoft-managed keys or customer-managed keys.

Learn more about configuration customer-managed keys for Cognitive Services in https://go.microsoft.com/fwlink/?linkid=2121321.