Support for MSSQL Managed Instance - Transparent data encryption

[Marcus-James-Adams]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

The azure portal allows you to apply TDE (Transparent data encryption) with either a system manged key, or a customer manged key,. It would be good if we could set this from the start via terraform

I would see it working similar to mssql_server_transparent_data_encryption

New or Affected Resource(s)

• azurerm_mssql_managed_instance_transparent_data_encryption

Potential Terraform Configuration

Example Usage with Service Managed Key

resource "azurerm_mssql_managed_instance_transparent_data_encryption" "example" {
  server_id = mssql_managed_instance.example.id
}

Example Usage with Customer Managed Key

resource "azurerm_mssql_managed_instance_transparent_data_encryption" "example" {
  server_id = sql_managed_instance.example.id
  key_vault_key_id = azurerm_key_vault_key.example.id
  auto_rotate_key = false
}

• 0000

[opslivia]

This was released with #13748 behind the 3.0 Beta flag. Opt-in instructions for the 3.0 Beta here.

[github-actions[bot]]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.

[katbyte]

Reopening as there request was too support TDE at the server level and #13748 implements it at the DB level.

[opslivia]

Hi apologies, I linked the wrong issue closing this before. Since MSSQL resources have replaced the old SQL resources, I suggest we update this issue to ask for TDE on MSSQL Managed Instance instead.