Storage account uses AES-256-GCM for SMB encryption

# Set SMB channel encryption to AES-256-GCM on the storage account
resource "azurerm_storage_account" "<example_resource_name>" {
  name                     = "<example_resource_name>"
  resource_group_name      = "<example_resource_name>"
  location                 = "<example_location>"
  account_tier             = "Standard"
  account_replication_type = "LRS"

  share_properties {
    smb {
      channel_encryption_type = "AES256_GCM" # CRITICAL: Enables AES-256-GCM for SMB channel encryption
    }
  }
}

// Bicep: enforce AES-256-GCM for SMB channel encryption on the storage account's File Service
resource sa 'Microsoft.Storage/storageAccounts@2023-01-01' existing = {
  name: '<example_resource_name>'
}

resource fileService 'Microsoft.Storage/storageAccounts/fileServices@2023-01-01' = {
  name: 'default'
  parent: sa
  properties: {
    protocolSettings: {
      smb: {
        channelEncryption: [ 'AES-256-GCM' ] // CRITICAL: Allows AES-256-GCM for SMB channel encryption to pass the check
      }
    }
  }
}