Server-side encryption with Rekeying 101

specification/storage/data-plane/Microsoft.BlobStorage/stable/2026-04-06/blob.json

@@ -1,4 +1,4 @@
 {
   "swagger": "2.0",
   "info": {
     "title": "Azure Blob Storage",
@@ -4466,6 +4466,15 @@
           },
           {
             "$ref": "#/parameters/FileRequestIntent"
+          },
+          {
+            "$ref": "#/parameters/SourceEncryptionKey"
+          },
+          {
+            "$ref": "#/parameters/SourceEncryptionKeySha256"
+          },
+          {
+            "$ref": "#/parameters/SourceEncryptionAlgorithm"
           }
         ],
         "responses": {
@@ -6948,6 +6957,15 @@
           },
           {
             "$ref": "#/parameters/FileRequestIntent"
+          },
+          {
+            "$ref": "#/parameters/SourceEncryptionKey"
+          },
+          {
+            "$ref": "#/parameters/SourceEncryptionKeySha256"
+          },
+          {
+            "$ref": "#/parameters/SourceEncryptionAlgorithm"
           }
         ],
         "responses": {
@@ -7792,6 +7810,15 @@
           },
           {
             "$ref": "#/parameters/FileRequestIntent"
+          },
+          {
+            "$ref": "#/parameters/SourceEncryptionKey"
+          },
+          {
+            "$ref": "#/parameters/SourceEncryptionKeySha256"
+          },
+          {
+            "$ref": "#/parameters/SourceEncryptionAlgorithm"
           }
         ],
         "responses": {
@@ -8811,6 +8838,15 @@
           },
           {
             "$ref": "#/parameters/FileRequestIntent"
+          },
+          {
+            "$ref": "#/parameters/SourceEncryptionKey"
+          },
+          {
+            "$ref": "#/parameters/SourceEncryptionKeySha256"
+          },
+          {
+            "$ref": "#/parameters/SourceEncryptionAlgorithm"
           }
         ],
         "responses": {
@@ -12458,6 +12494,40 @@
       "x-ms-parameter-location": "method",
       "description": "The snapshot parameter is an opaque DateTime value that, when present, specifies the blob snapshot to retrieve. For more information on working with blob snapshots, see <a href=\"https://learn.microsoft.com/rest/api/storageservices/creating-a-snapshot-of-a-blob\">Creating a Snapshot of a Blob.</a>"
     },
+    "SourceEncryptionKey": {
+      "name": "x-ms-source-encryption-key",
+      "x-ms-client-name": "sourceEncryptionKey",
+      "type": "string",
+      "in": "header",
+      "required": false,
+      "x-ms-parameter-location": "method",
+      "description": "Optional. Specifies the source encryption key to use to encrypt the source data provided in the request."
+    },
+    "SourceEncryptionKeySha256": {
+      "name": "x-ms-source-encryption-key-sha256",
+      "x-ms-client-name": "sourceEncryptionKeySha256",
+      "type": "string",
+      "in": "header",
+      "required": false,
+      "x-ms-parameter-location": "method",
+      "description": "The SHA-256 hash of the provided source encryption key. Must be provided if the x-ms-source-encryption-key header is provided."
+    },
+    "SourceEncryptionAlgorithm": {
+      "name": "x-ms-source-encryption-algorithm",
+      "x-ms-client-name": "sourceEncryptionAlgorithm",
+      "type": "string",
+      "in": "header",
+      "required": false,
+      "enum": [
+        "AES256"
+      ],
+      "x-ms-enum": {
+        "name": "EncryptionAlgorithmType",
+        "modelAsString": false
+      },
+      "x-ms-parameter-location": "method",
+      "description": "The algorithm used to produce the source encryption key hash. Currently, the only accepted value is \"AES256\". Must be provided if the x-ms-source-encryption-key is provided."
+    },
     "VersionId": {
       "name": "versionid",
       "x-ms-client-name": "versionId",