This project deploys the following resources in an Azure subscription:
-
Two resource groups: -- A "Key Vault" resource group, -kv-rg -- A "VM" resource group, -rg
-
Two VM's: -- A Linux VM with Azure server-side encryption enabled using a customer-managed key for the OS volume -- A Windows VM with Azure Key Encryption enabled for the OS volume
-
A virtual network to connect the virtual machines
-
An Azure Key Vault to store key encryption keys to securely support the above disk encryption