Skip to content

Commit 515596d

Browse files
committed
Acrolinx changes
1 parent 4ac6750 commit 515596d

File tree

1 file changed

+9
-9
lines changed

1 file changed

+9
-9
lines changed

articles/azure-monitor/platform/customer-managed-keys.md

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
2-
title: Azure Monitor customer managed key configuration guide
3-
description: Information and steps to configure Customer Managed Key (CMK) to encrypt data in your Log Analytics workspaces using an Azure Key Vault key.
2+
title: Azure Monitor customer-managed key configuration guide
3+
description: Information and steps to configure Customer-Managed Key (CMK) to encrypt data in your Log Analytics workspaces using an Azure Key Vault key.
44
ms.service: azure-monitor
55
ms.subservice: logs
66
ms.topic: conceptual
@@ -10,9 +10,9 @@ ms.date: 01/07/2020
1010

1111
---
1212

13-
# Azure Monitor customer managed key configuration guide
13+
# Azure Monitor customer-managed key configuration guide
1414

15-
This guide provides background information and steps to configure Customer Managed Keys (CMK) for your Log Analytics workspaces. Once configured, any data sent to your workspaces is encrypted with your Azure Key Vault key.
15+
This guide provides background information and steps to configure Customer-Managed Keys (CMK) for your Log Analytics workspaces. Once configured, any data sent to your workspaces is encrypted with your Azure Key Vault key.
1616

1717
We recommend you review [Limitations and constraints](#Limitations and constraints) below before configuration.
1818

@@ -22,7 +22,7 @@ We recommend you review [Limitations and constraints](#Limitations and constrain
2222

2323
- The CMK deployment described in the guide is delivered in production quality and supported as such although it's an early access feature.
2424

25-
- CMK capability is delivered on a dedicated data-store-cluster, aka ADX cluster and suitable for customers sending 1TB per day.
25+
- CMK capability is delivered on a dedicated data-store-cluster, aka ADX cluster and suitable for customers sending 1 TB per day.
2626

2727
- CMK pricing model isn't available currently and it isn't covered in the guide -- A pricing model for dedicated data-store-cluster is expected in the second quarter of 2020 and will apply on any existing CMK deployments.
2828

@@ -33,15 +33,15 @@ We recommend you review [Limitations and constraints](#Limitations and constrain
3333
> Log Analytics and Application Insights are using the same data-store platform and query engine.
3434
> We are bringing these two stores together via integration of Application Insights into Log Analytics to create a single unified logs store under Azure Monitor. This change is planned for the second quarter of calendar year 2020. If you don’t have to deploy CMK for your Application Insight data by then, we recommend waiting for the completion of the consolidation since such deployments will be disrupted by the consolidation and you will have to re-configure CMK after the migration to Log Analytics workspace.
3535
36-
## Customer managed key (CMK) overview
36+
## Customer-managed key (CMK) overview
3737

3838
[Encryption at Rest](https://docs.microsoft.com/azure/security/fundamentals/encryption-atrest)
3939
is a common privacy and security requirement in organizations. You can
4040
let Azure completely manage Encryption at Rest, while you have various
4141
options to closely manage encryption or encryption keys.
4242

4343
The Azure Monitor data-store ensures that all data encrypted at
44-
rest using Azure managed keys while stored in Azure storage. Azure Monitor also
44+
rest using Azure-managed keys while stored in Azure Storage. Azure Monitor also
4545
provides an option for data encryption using your own key that is stored
4646
in [Azure Key Vaults](https://docs.microsoft.com/azure/key-vault/key-vault-overview),
4747
which is accessed using system-assigned [managed identity](https://docs.microsoft.com/azure/active-directory/managed-identities-azure-resources/overview) authentication. This key can be either [software or hardware-HSM
@@ -563,7 +563,7 @@ platform and query engine -- We are bringing these two stores together
563563
via integration of Application Insights into Log Analytics to provide a
564564
single unified logs store under Azure Monitor by the second quarter of
565565
2020. This change will bring your Application Insight data into Log
566-
Analytics workspaces and make queries, insights and other improvements
566+
Analytics workspaces and make queries, insights, and other improvements
567567
possible while the configuration of CMK on your workspace, will also
568568
apply to your Application Insights data.
569569
@@ -588,7 +588,7 @@ of the ones listed above.
588588
589589
### Create *Cluster* resource
590590
591-
This resource is used as intermediate identity connection between your Key Vault and your components. AFTER you received a confirmation that your subscriptions were whitelisted, create a Log Analytics Cluster resource at the region where your components are located. The type of the Cluster resource is defined at creation time by setting the clusterType property to either LogAnalytics, or ApplicationInsights’ – It should be ApplicationInsights for Application Insights CMK. clusterType setting can’t be altered after the configuration.
591+
This resource is used as intermediate identity connection between your Key Vault and your components. AFTER you received a confirmation that your subscriptions were whitelisted, create a Log Analytics Cluster resource at the region where your components are located. The type of the Cluster resource is defined at creation time by setting the *clusterType* property to either *LogAnalytics*, or *ApplicationInsights*. It should be *ApplicationInsights* for Application Insights CMK. The *clusterType* setting can’t be altered after the configuration.
592592
593593
Create:
594594
```

0 commit comments

Comments
 (0)