initial commit

Author: mamccrea

articles/stream-analytics/data-protection.md

@@ -0,0 +1,56 @@
+---
+title: Data protection in Azure Stream Analytics
+description: This article explains 
+author: mamccrea
+ms.author: mamccrea
+ms.service: stream-analytics
+ms.topic: conceptual
+ms.date: 02/27/2020
+---
+
+# Data protection in Azure Stream Analytics 
+
+Azure Stream Analytics is a fully managed platform-as-a-service that allows you to build real-time analytics pipelines. All of the heavy lifting, such as cluster provisioning, scaling nodes to accommodate your usage, and managing internal checkpoints, is managed behind the scenes. Stream Analytics also employs best-in-class encryption standards across its infrastructure to encrypt and secure your data. 
+
+## Encryption your data
+
+You can use your own storage account (general purpose V1 or V2) to store any private data assets that are required by the Stream Analytics runtime. Your storage account can be encrypted as needed. None of your private data assets are stored permanently by the Stream Analytics infrastructure. 
+
+This setting must be configured at the time of Stream Analytics job creation, and it can't be modified throughout the job's life cycle. Modification or deletion of storage that is being used by your Stream Analytics is not recommended. If you delete your storage account, you will permanently delete all private data assets, which will cause your job to fail. 
+
+## Configure storage account for private data 
+
+Use the following steps to configure your storage account for private data assets. This configuration is made from your Stream Analytics job, not from your storage account.
+
+1. Sign in to the [Azure portal](https://portal.azure.com/).
+
+1. Select **Create a resource** in the upper left-hand corner of the Azure portal. 
+
+1. Select **Analytics** > **Stream Analytics job** from the results list. 
+
+1. Fill out the Stream Analytics job page with necessary details such as name, region, and scale. 
+
+1. Select the check box that says *Secure all private data assets needed by this job in my Storage account*.
+
+1. Select a storage account from your subscription. Note that this setting cannot be modified throughout the life cycle of the job. 
+
+## Private data assets that are stored
+
+Any private data that is required to be persisted by Stream Analytics is stored in your storage account. Examples of private data assets include: 
+
+* Queries that you have authored and their related configurations  
+
+* User-defined functions 
+
+* Results of sampling data from inputs 
+
+* Checkpoints needed by the Stream Analytics runtime
+
+* Snapshots of reference data 
+
+Connection details of your resources, which are used by your Stream Analytics job, are also stored. Encrypt your storage account to secure all of your data. 
+
+To help you meet your compliance obligations in any regulated industry or environment, you can read more about [Microsoft ' compliance offerings](https://gallery.technet.microsoft.com/Overview-of-Azure-c1be3942). 
+
+## Next steps
+