add CMK feature

Author: PatrickFarley

articles/ai-services/computer-vision/identity-encrypt-data-at-rest.md

@@ -26,5 +26,5 @@ The Face service automatically encrypts your data when it's persisted to the clo
 ## Next steps
 
 * For a full list of services that support CMK, see [Customer-Managed Keys for Azure AI services](../encryption/cognitive-services-encryption-keys-portal.md)
-* [What is Azure Key Vault?](/azure/key-vault/general/overview)?
+* [What is Azure Key Vault?](/azure/key-vault/general/overview)
 

articles/ai-services/content-safety/encrypt-data-at-rest.md

@@ -0,0 +1,28 @@
+---
+title: Azure AI Content Safety service encryption of data at rest
+titleSuffix: Azure AI services
+description: Microsoft offers Microsoft-managed encryption keys, and also lets you manage your Azure AI services subscriptions with your own keys, called customer-managed keys (CMK). This article covers data encryption at rest for Face, and how to enable and manage CMK. 
+author: PatrickFarley
+manager: nitinme
+
+ms.service: azure-ai-vision
+ms.subservice: azure-ai-content-safety
+ms.topic: how-to
+ms.date: 02/21/2025
+ms.author: pafarley
+ms.custom: cogserv-non-critical-vision
+#Customer intent: As a user of the Content Safety service, I want to learn how encryption at rest works.
+---
+
+# Azure AI Content Safety service encryption of data at rest
+
+The Azure AI Content Safety service automatically encrypts your data when it's persisted to the cloud. That encryption protects your data and helps you meet your organizational security and compliance commitments.
+
+[!INCLUDE [cognitive-services-about-encryption](../includes/cognitive-services-about-encryption.md)]
+
+[!INCLUDE [cognitive-services-cmk](../includes/configure-customer-managed-keys.md)]
+
+## Next steps
+
+* For a full list of services that support CMK, see [Customer-Managed Keys for Azure AI services](../encryption/cognitive-services-encryption-keys-portal.md)
+* [What is Azure Key Vault?](/azure/key-vault/general/overview)

articles/ai-services/content-safety/toc.yml

@@ -91,6 +91,8 @@ items:
     items:
       - name: Set up Virtual Networks
         href: ../cognitive-services-virtual-networks.md?context=/azure/ai-services/content-safety/context/context
+      - name: Use customer-managed keys 
+        href: ./encrypt-data-at-rest.md
 
 - name: Reference
   items:

articles/ai-services/encryption/cognitive-services-encryption-keys-portal.md

@@ -51,6 +51,7 @@ The process to enable customer-managed keys with Azure Key Vault for Azure AI se
 
 * [Azure OpenAI](../openai/encrypt-data-at-rest.md)
 * [Azure Custom Vision ](../custom-vision-service/encrypt-data-at-rest.md)
+* [Azure Content Safety ](../content-safety/encrypt-data-at-rest.md)
 * [Azure AI Face Service ](../computer-vision/identity-encrypt-data-at-rest.md)
 * [Azure AI Document Intelligence ](../../ai-services/document-intelligence/authentication/encrypt-data-at-rest.md)
 * [Azure AI Translator ](../translator/encrypt-data-at-rest.md)