We recommend using Azure Native.
Azure v6.28.0 published on Friday, Oct 3, 2025 by Pulumi
azure.storage.getEncryptionScope
Start a Neo task
Explain and create an azure.storage.getEncryptionScope resource
Use this data source to access information about an existing Storage Encryption Scope.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";
const example = azure.storage.getAccount({
name: "storageaccountname",
resourceGroupName: "resourcegroupname",
});
const exampleGetEncryptionScope = example.then(example => azure.storage.getEncryptionScope({
name: "existingStorageES",
storageAccountId: example.id,
}));
export const id = exampleGetEncryptionScope.then(exampleGetEncryptionScope => exampleGetEncryptionScope.id);
import pulumi
import pulumi_azure as azure
example = azure.storage.get_account(name="storageaccountname",
resource_group_name="resourcegroupname")
example_get_encryption_scope = azure.storage.get_encryption_scope(name="existingStorageES",
storage_account_id=example.id)
pulumi.export("id", example_get_encryption_scope.id)
package main
import (
"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/storage"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
example, err := storage.LookupAccount(ctx, &storage.LookupAccountArgs{
Name: "storageaccountname",
ResourceGroupName: pulumi.StringRef("resourcegroupname"),
}, nil)
if err != nil {
return err
}
exampleGetEncryptionScope, err := storage.LookupEncryptionScope(ctx, &storage.LookupEncryptionScopeArgs{
Name: "existingStorageES",
StorageAccountId: example.Id,
}, nil)
if err != nil {
return err
}
ctx.Export("id", exampleGetEncryptionScope.Id)
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azure = Pulumi.Azure;
return await Deployment.RunAsync(() =>
{
var example = Azure.Storage.GetAccount.Invoke(new()
{
Name = "storageaccountname",
ResourceGroupName = "resourcegroupname",
});
var exampleGetEncryptionScope = Azure.Storage.GetEncryptionScope.Invoke(new()
{
Name = "existingStorageES",
StorageAccountId = example.Apply(getAccountResult => getAccountResult.Id),
});
return new Dictionary<string, object?>
{
["id"] = exampleGetEncryptionScope.Apply(getEncryptionScopeResult => getEncryptionScopeResult.Id),
};
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.storage.StorageFunctions;
import com.pulumi.azure.storage.inputs.GetAccountArgs;
import com.pulumi.azure.storage.inputs.GetEncryptionScopeArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var example = StorageFunctions.getAccount(GetAccountArgs.builder()
.name("storageaccountname")
.resourceGroupName("resourcegroupname")
.build());
final var exampleGetEncryptionScope = StorageFunctions.getEncryptionScope(GetEncryptionScopeArgs.builder()
.name("existingStorageES")
.storageAccountId(example.id())
.build());
ctx.export("id", exampleGetEncryptionScope.id());
}
}
variables:
example:
fn::invoke:
function: azure:storage:getAccount
arguments:
name: storageaccountname
resourceGroupName: resourcegroupname
exampleGetEncryptionScope:
fn::invoke:
function: azure:storage:getEncryptionScope
arguments:
name: existingStorageES
storageAccountId: ${example.id}
outputs:
id: ${exampleGetEncryptionScope.id}
API Providers
This data source uses the following Azure API Providers:
Microsoft.Storage- 2023-05-01
Using getEncryptionScope
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getEncryptionScope(args: GetEncryptionScopeArgs, opts?: InvokeOptions): Promise<GetEncryptionScopeResult>
function getEncryptionScopeOutput(args: GetEncryptionScopeOutputArgs, opts?: InvokeOptions): Output<GetEncryptionScopeResult>def get_encryption_scope(name: Optional[str] = None,
storage_account_id: Optional[str] = None,
opts: Optional[InvokeOptions] = None) -> GetEncryptionScopeResult
def get_encryption_scope_output(name: Optional[pulumi.Input[str]] = None,
storage_account_id: Optional[pulumi.Input[str]] = None,
opts: Optional[InvokeOptions] = None) -> Output[GetEncryptionScopeResult]func LookupEncryptionScope(ctx *Context, args *LookupEncryptionScopeArgs, opts ...InvokeOption) (*LookupEncryptionScopeResult, error)
func LookupEncryptionScopeOutput(ctx *Context, args *LookupEncryptionScopeOutputArgs, opts ...InvokeOption) LookupEncryptionScopeResultOutput> Note: This function is named LookupEncryptionScope in the Go SDK.
public static class GetEncryptionScope
{
public static Task<GetEncryptionScopeResult> InvokeAsync(GetEncryptionScopeArgs args, InvokeOptions? opts = null)
public static Output<GetEncryptionScopeResult> Invoke(GetEncryptionScopeInvokeArgs args, InvokeOptions? opts = null)
}public static CompletableFuture<GetEncryptionScopeResult> getEncryptionScope(GetEncryptionScopeArgs args, InvokeOptions options)
public static Output<GetEncryptionScopeResult> getEncryptionScope(GetEncryptionScopeArgs args, InvokeOptions options)
fn::invoke:
function: azure:storage/getEncryptionScope:getEncryptionScope
arguments:
# arguments dictionaryThe following arguments are supported:
- Name string
- The name of this Storage Encryption Scope.
- Storage
Account stringId - The ID of the Storage Account where this Storage Encryption Scope exists.
- Name string
- The name of this Storage Encryption Scope.
- Storage
Account stringId - The ID of the Storage Account where this Storage Encryption Scope exists.
- name String
- The name of this Storage Encryption Scope.
- storage
Account StringId - The ID of the Storage Account where this Storage Encryption Scope exists.
- name string
- The name of this Storage Encryption Scope.
- storage
Account stringId - The ID of the Storage Account where this Storage Encryption Scope exists.
- name str
- The name of this Storage Encryption Scope.
- storage_
account_ strid - The ID of the Storage Account where this Storage Encryption Scope exists.
- name String
- The name of this Storage Encryption Scope.
- storage
Account StringId - The ID of the Storage Account where this Storage Encryption Scope exists.
getEncryptionScope Result
The following output properties are available:
- Id string
- The provider-assigned unique ID for this managed resource.
- Key
Vault stringKey Id - The ID of the Key Vault Key.
- Name string
- Source string
- The source of the Storage Encryption Scope.
- Storage
Account stringId
- Id string
- The provider-assigned unique ID for this managed resource.
- Key
Vault stringKey Id - The ID of the Key Vault Key.
- Name string
- Source string
- The source of the Storage Encryption Scope.
- Storage
Account stringId
- id String
- The provider-assigned unique ID for this managed resource.
- key
Vault StringKey Id - The ID of the Key Vault Key.
- name String
- source String
- The source of the Storage Encryption Scope.
- storage
Account StringId
- id string
- The provider-assigned unique ID for this managed resource.
- key
Vault stringKey Id - The ID of the Key Vault Key.
- name string
- source string
- The source of the Storage Encryption Scope.
- storage
Account stringId
- id str
- The provider-assigned unique ID for this managed resource.
- key_
vault_ strkey_ id - The ID of the Key Vault Key.
- name str
- source str
- The source of the Storage Encryption Scope.
- storage_
account_ strid
- id String
- The provider-assigned unique ID for this managed resource.
- key
Vault StringKey Id - The ID of the Key Vault Key.
- name String
- source String
- The source of the Storage Encryption Scope.
- storage
Account StringId
Package Details
- Repository
- Azure Classic pulumi/pulumi-azure
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
azurermTerraform Provider.
