Terraform Azure provider - can OS disk be encrypted only with azurerm_linux_virtual_machine?

Question

If so, what about other machines OS? I can only see the documentation of disk encryption inside the azurerm_linux_virtual_machine resource.

Answer 1

NO, Disk encryption also supports Windows Azure VM.

You could see an os_disk block supports the following:

The disk_encryption_set_id is used to encrypt this OS Disk from azurerm_windows_virtual_machine

Then to encrypt the OS disk, you will create azurerm_disk_encryption_set resource and reference it in the Azure VM OS disk like this:

  os_disk {
    caching              = "ReadWrite"
    storage_account_type = "Standard_LRS"
    
    disk_encryption_set_id = azurerm_disk_encryption_set.example.id   #use for disk encryption
  }