Merge pull request #277007 from b-ahibbard/2xEncryptGov

US Gov caveat for double encryption

Author: prmerger-automator[bot]

articles/azure-netapp-files/azure-government.md

@@ -26,7 +26,6 @@ All [Azure NetApp Files features](whats-new.md) available on Azure public cloud
 |:--- |:--- |:--- |
 | Azure NetApp Files backup | Generally available (GA) | No |
 | Azure NetApp Files customer-managed keys | Generally available (GA) | No | 
-| Azure NetApp Files double encryption at rest | Public preview | Public preview |
 | Azure NetApp Files large volumes | Generally available (GA) | Generally available [(select regions)](large-volumes-requirements-considerations.md#supported-regions) |
 
 ## Portal access

articles/azure-netapp-files/double-encryption-at-rest.md

@@ -23,6 +23,9 @@ If you are using this feature for the first time, you need to [register for the
 
 When you create a volume in a double-encryption capacity pool, the default key management (the **Encryption key source** field) is `Microsoft Managed Key`, and the other choice is `Customer Managed Key`. Using customer-managed keys requires additional preparation of an Azure Key Vault and other details.  For more information about using volume encryption with customer managed keys, see [Configure customer-managed keys for Azure NetApp Files volume encryption](configure-customer-managed-keys.md).
 
+>[!IMPORTANT]
+>Double encryption in US Gov regions is only supported with platform-managed keys, not customer-managed keys.
+
 :::image type="content" source="./media/double-encryption-at-rest/double-encryption-create-volume.png" alt-text="Screenshot of the Create Volume page in a double-encryption capacity pool." lightbox="./media/double-encryption-at-rest/double-encryption-create-volume.png":::
 
 ## Supported regions
@@ -61,14 +64,16 @@ Azure NetApp Files double encryption at rest is supported for the following regi
 * UAE North
 * UK South 
 * UK West
-* US Gov Arizona
-* US Gov Texas
-* US Gov Virginia
+* US Gov Arizona*
+* US Gov Texas*
+* US Gov Virginia*
 * West Europe
 * West US
 * West US 2
 * West US 3
 
+\* Double encryption at rest in US Gov regions is only supported with platform-managed keys, not customer-managed keys.
+
 ## Considerations
 
 * Azure NetApp Files double encryption at rest supports [Standard network features](azure-netapp-files-network-topologies.md#configurable-network-features), but not Basic network features.