Skip to content

Commit 2a722a5

Browse files
Merge pull request #274822 from dileepraotv-github/master
updated applies to
2 parents fca8696 + 96adf21 commit 2a722a5

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

articles/cosmos-db/how-to-setup-customer-managed-keys-existing-accounts.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ ms.devlang: azurecli
1212

1313
# Configure customer-managed keys for your existing Azure Cosmos DB account with Azure Key Vault
1414

15-
[!INCLUDE[NoSQL, MongoDB, Gremlin, Table](includes/appliesto-nosql-mongodb-cassandra-gremlin-table.md)]
15+
[!INCLUDE[NoSQL, MongoDB, Gremlin, Table](includes/appliesto-nosql-mongodb-gremlin-table.md)]
1616

1717
Enabling a second layer of encryption for data at rest using [Customer Managed Keys](./how-to-setup-customer-managed-keys.md) while creating a new Azure Cosmos DB account has been Generally available for some time now. As a natural next step, we now have the capability to enable CMK on existing Azure Cosmos DB accounts.
1818

@@ -87,8 +87,8 @@ For enabling CMK on existing account that has continuous backup and point in tim
8787
```
8888
## Known limitations
8989
90-
- Enabling CMK is available only at a Cosmos DB account level and not at collections.
9190
- We don't support enabling CMK on existing Azure Cosmos DB for Apache Cassandra accounts.
91+
- Enabling CMK is available only at a Cosmos DB account level and not at collections.
9292
- We don't support enabling CMK on existing accounts that are enabled for Materialized Views and [all versions and deletes change feed mode](nosql/change-feed-modes.md#all-versions-and-deletes-change-feed-mode-preview).
9393
- Ensure account must not have documents with large IDs greater than 990 bytes before enabling CMK. If not, you'll get an error due to max supported limit of 1024 bytes after encryption.
9494
- During encryption of existing data, [control plane](./audit-control-plane-logs.md) actions such as "add region" is blocked. These actions are unblocked and can be used right after the encryption is complete.

0 commit comments

Comments
 (0)