update

Author: msmbaldwin

articles/security/fundamentals/encryption-models.md

@@ -132,94 +132,105 @@ When server-side encryption using customer-managed keys in customer-controlled h
 
 Here are the services that support server-side encryption using customer managed keys:
 
+
 | Product, Feature, or Service | Key Vault | Managed HSM | Documentation |
 | --- | --- | --- | --- |
 | **AI and Machine Learning** | | | |
 | [Azure AI Search](/azure/search/) | Yes | | |
 | [Azure AI services](/azure/cognitive-services/) | Yes | Yes | |
+| [Azure AI Studio](/azure/ai-studio) | Yes | | [CMKs for encryption](/azure/ai-studio/concepts/encryption-keys-portal) |
 | [Azure Machine Learning](/azure/machine-learning/) | Yes | | |
+| [Azure OpenAI](/azure/ai-services/openai/) | Yes | Yes | |
 | [Content Moderator](/azure/cognitive-services/content-moderator/) | Yes | Yes | |
+| [Dataverse](/powerapps/maker/data-platform/) | Yes | Yes | |
+| [Dynamics 365](/dynamics365/) | Yes | Yes | |
 | [Face](/azure/cognitive-services/face/) | Yes | Yes | |
 | [Language Understanding](/azure/cognitive-services/luis/) | Yes | Yes | |
-| [Azure OpenAI](/azure/ai-services/openai/) | Yes | Yes | |
 | [Personalizer](/azure/cognitive-services/personalizer/) | Yes | Yes | |
+| [Power Platform](/power-platform/) | Yes | Yes | |
 | [QnA Maker](/azure/cognitive-services/qnamaker/) | Yes | Yes | |
 | [Speech Services](/azure/cognitive-services/speech-service/) | Yes | Yes | |
 | [Translator Text](/azure/cognitive-services/translator/) | Yes | Yes | |
-| [Power Platform](/power-platform/) | Yes | Yes | |
-| [Dataverse](/powerapps/maker/data-platform/) | Yes | Yes | |
-| [Dynamics 365](/dynamics365/) | Yes | Yes | |
 | **Analytics** | | | |
-| [Azure Stream Analytics](/azure/stream-analytics/) | Yes\*\* | Yes | |
-| [Event Hubs](/azure/event-hubs/) | Yes | | |
-| [Functions](/azure/azure-functions/) | Yes | | |
-| [Azure HDInsight](/azure/hdinsight/) | Yes | | |
-| [Azure Monitor Application Insights](/azure/azure-monitor/app/app-insights-overview) | Yes | | |
-| [Azure Monitor Log Analytics](/azure/azure-monitor/logs/log-analytics-overview) | Yes | Yes | |
 | [Azure Data Explorer](/azure/data-explorer/) | Yes | | |
 | [Azure Data Factory](/azure/data-factory/) | Yes | Yes | |
 | [Azure Data Lake Store](/azure/data-lake-store/) | Yes, RSA 2048-bit | | |
+| [Azure HDInsight](/azure/hdinsight/) | Yes | | |
+| [Azure Monitor Application Insights](/azure/azure-monitor/app/app-insights-overview) | Yes | | |
+| [Azure Monitor Log Analytics](/azure/azure-monitor/logs/log-analytics-overview) | Yes | Yes | |
+| [Azure Stream Analytics](/azure/stream-analytics/) | Yes\*\* | Yes | |
+| [Event Hubs](/azure/event-hubs/) | Yes | | |
+| [Functions](/azure/azure-functions/) | Yes | | |
+| [Microsoft Fabric](/fabric) | Yes | | [CMK encryption](/fabric/security/security-scenario#customer-managed-key-cmk-encryption-and-microsoft-fabric) |
+| [Power BI Embedded](/power-bi) | Yes | | [BYOK for Power BI](/power-bi/enterprise/service-encryption-byok) |
 | **Containers** | | | |
+| [Azure Container Storage](https://learn.microsoft.com/en-us/azure/storage/container-storage) | Yes | | [Dynamic storage pool with CMKs](/azure/storage/container-storage/use-container-storage-with-managed-disks#create-a-dynamic-storage-pool-using-your-own-encryption-key-optional) |
 | [Azure Kubernetes Service](/azure/aks/) | Yes | Yes | |
+| [Azure Red Hat OpenShift](/azure/openshift/) | Yes | | [CMK encryption](/azure/openshift/howto-byok) |
 | [Container Instances](/azure/container-instances/) | Yes | | |
 | [Container Registry](/azure/container-registry/) | Yes | | |
 | **Compute** | | | |
-| [Virtual Machines](/azure/virtual-machines/) | Yes | Yes | |
-| [Virtual Machine Scale Set](/azure/virtual-machine-scale-sets/) | Yes | Yes | |
-| [SAP HANA](/azure/sap/large-instances/hana-overview-architecture) | Yes | | |
 | [App Service](/azure/app-service/) | Yes\*\* | Yes | |
 | [Automation](/azure/automation/) | Yes | | |
 | [Azure Functions](/azure/azure-functions/) | Yes\*\* | Yes | |
 | [Azure portal](/azure/azure-portal/) | Yes\*\* | Yes | |
 | [Azure VMware Solution](/azure/azure-vmware/) | Yes | Yes | |
-| [Logic Apps](/azure/logic-apps/) | Yes | | |
 | [Azure-managed applications](/azure/azure-resource-manager/managed-applications/overview) | Yes\*\* | Yes | |
+| [Batch](/azure/batch/) | Yes | | [Configure CMKs](/azure/batch/batch-customer-managed-key) |
+| [Logic Apps](/azure/logic-apps/) | Yes | | |
+| [SAP HANA](/azure/sap/large-instances/hana-overview-architecture) | Yes | | |
 | [Service Bus](/azure/service-bus-messaging/) | Yes | | |
 | [Site Recovery](/azure/site-recovery/) | Yes | | |
+| [Virtual Machine Scale Set](/azure/virtual-machine-scale-sets/) | Yes | Yes | |
+| [Virtual Machines](/azure/virtual-machines/) | Yes | Yes | |
 | **Databases** | | | |
-| [SQL Server on Virtual Machines](/azure/virtual-machines/windows/sql/) | Yes | | |
-| [Azure SQL Database](/azure/azure-sql/database/) | Yes, RSA 3072-bit | Yes | |
-| [Azure SQL Managed Instance](/azure/azure-sql/managed-instance/) | Yes, RSA 3072-bit | Yes | |
+| [Azure Cosmos DB](/azure/cosmos-db/) | Yes | Yes | [Configure CMKs (Key Vault)](/azure/cosmos-db/how-to-setup-cmk) and [Configure CMKs (Managed HSM)](/azure/cosmos-db/how-to-setup-customer-managed-keys-mhsm) |
 | [Azure Database for MySQL](/azure/mysql/) | Yes | Yes | |
 | [Azure Database for PostgreSQL](/azure/postgresql/) | Yes | Yes | |
+| [Azure Database Migration Service](/azure/dms/) | N/A\* | | |
+| [Azure Databricks](/azure/databricks/) | Yes | Yes | |
+| [Azure Managed Instance for Apache Cassandra](/azure/managed-instance-apache-cassandra/) | Yes | | [CMKs](/azure/managed-instance-apache-cassandra/customer-managed-keys) |
+| [Azure SQL Database](/azure/azure-sql/database/) | Yes, RSA 3072-bit | Yes | |
+| [Azure SQL Managed Instance](/azure/azure-sql/managed-instance/) | Yes, RSA 3072-bit | Yes | |
 | [Azure Synapse Analytics (dedicated SQL pool (formerly SQL DW) only)](/azure/synapse-analytics/) | Yes, RSA 3072-bit | Yes | |
+| [SQL Server on Virtual Machines](/azure/virtual-machines/windows/sql/) | Yes | | |
 | [SQL Server Stretch Database](/sql/sql-server/stretch-database/) | Yes, RSA 3072-bit | | |
-| [Table Storage](/azure/storage/tables/) | Yes | | |
-| [Azure Cosmos DB](/azure/cosmos-db/) | Yes | Yes | [Configure CMKs (Key Vault)](/azure/cosmos-db/how-to-setup-cmk) and [Configure CMKs (Managed HSM)](/azure/cosmos-db/how-to-setup-customer-managed-keys-mhsm) |
-| [Azure Databricks](/azure/databricks/) | Yes | Yes | |
-| [Azure Database Migration Service](/azure/dms/) | N/A\* | | |
-| **Identity** | | | |
+| [Table Storage](/azure/storage/tables/) | Yes | | || **Identity** | | | |
 | [Microsoft Entra ID](/azure/active-directory/) | - | | |
 | [Microsoft Entra Domain Services](/azure/active-directory-domain-services/) | Yes | | |
 | **Integration** | | | |
+| [Azure Health Data Services](/azure/healthcare-apis/) | Yes | | [Configure CMKs for DICOM](/azure/healthcare-apis/dicom/configure-customer-managed-keys), [Configure CMKs for FHIR](/azure/healthcare-apis/fhir/configure-customer-managed-keys) |
 | [Service Bus](/azure/service-bus-messaging/) | Yes | | |
 | **IoT Services** | | | |
 | [IoT Hub](/azure/iot-hub/) | Yes | | |
 | [IoT Hub Device Provisioning](/azure/iot-dps/) | Yes | | |
 | **Management and Governance** | | | |
 | [Azure Migrate](/azure/migrate/) | Yes | | |
+| [Azure Monitor](/azure/azure-monitor) | Yes | | [CMKs](/azure/azure-monitor/logs/customer-managed-keys?tabs=portal) |
 | **Media** | | | |
 | [Media Services](/azure/media-services/) | Yes | | |
 | **Security** | | | |
+| [Microsoft Defender for Cloud](/azure/defender-for-cloud/) | Yes | | [Security baseline: CMKs](/security/benchmark/azure/baselines/microsoft-defender-for-cloud-security-baseline#dp-5-use-customer-managed-key-option-in-data-at-rest-encryption-when-required) |
 | [Microsoft Defender for IoT](/azure/defender-for-iot/) | Yes | | |
 | [Microsoft Sentinel](/azure/sentinel/) | Yes | Yes | |
 | **Storage** | | | |
+| [Archive Storage](/azure/storage/blobs/archive-blob) | Yes | | |
+| [Azure Backup](/azure/backup/) | Yes | Yes | |
+| [Azure Cache for Redis](/azure/azure-cache-for-redis/) | Yes\*\* | Yes | |
+| [Azure Managed Lustre](/azure/azure-managed-lustre/) | Yes | | [CMKs](/azure/azure-managed-lustre/customer-managed-encryption-keys) |
+| [Azure NetApp Files](/azure/azure-netapp-files/) | Yes | Yes | |
+| [Azure Stack Edge](/azure/databox-online/azure-stack-edge-overview/) | Yes | | |
 | [Blob Storage](/azure/storage/blobs/) | Yes | Yes | |
-| [Premium Blob Storage](/azure/storage/blobs/) | Yes | Yes | |
+| [Data Lake Storage Gen2](/azure/storage/blobs/data-lake-storage-introduction/) | Yes | Yes | |
 | [Disk Storage](/azure/virtual-machines/disks-types/) | Yes | Yes | |
-| [Ultra Disk Storage](/azure/virtual-machines/disks-types/) | Yes | Yes | |
-| [Managed Disk Storage](/azure/virtual-machines/disks-types/) | Yes | Yes | |
-| [File Storage](/azure/storage/files/) | Yes | Yes | |
 | [File Premium Storage](/azure/storage/files/) | Yes | Yes | |
+| [File Storage](/azure/storage/files/) | Yes | Yes | |
 | [File Sync](/azure/storage/file-sync/file-sync-introduction) | Yes | Yes | |
+| [Managed Disk Storage](/azure/virtual-machines/disks-types/) | Yes | Yes | |
+| [Premium Blob Storage](/azure/storage/blobs/) | Yes | Yes | |
 | [Queue Storage](/azure/storage/queues/) | Yes | Yes | |
-| [Data Lake Storage Gen2](/azure/storage/blobs/data-lake-storage-introduction/) | Yes | Yes | |
-| [Azure Cache for Redis](/azure/azure-cache-for-redis/) | Yes\*\* | Yes | |
-| [Azure NetApp Files](/azure/azure-netapp-files/) | Yes | Yes | |
-| [Archive Storage](/azure/storage/blobs/archive-blob) | Yes | | |
 | [StorSimple](/azure/storsimple/) | Yes | | |
-| [Azure Backup](/azure/backup/) | Yes | Yes | |
-| [Azure Stack Edge](/azure/databox-online/azure-stack-edge-overview/) | Yes | | |
+| [Ultra Disk Storage](/azure/virtual-machines/disks-types/) | Yes | Yes | |
 | **Other** | | | |
 | [Azure Data Manager for Energy](/azure/energy-data-services/overview-microsoft-energy-data-services) | Yes | | |