Skip to content

Commit 7ec4117

Browse files
authored
Merge pull request #183523 from kabharati/Atlantic_1222_02
Update concepts-data-encryption-postgresql.md
2 parents 9f865b3 + 3e407ce commit 7ec4117

File tree

1 file changed

+6
-4
lines changed

1 file changed

+6
-4
lines changed

articles/postgresql/concepts-data-encryption-postgresql.md

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -23,10 +23,12 @@ Key Vault is a cloud-based, external key management system. It's highly availabl
2323

2424
Data encryption with customer-managed keys for Azure Database for PostgreSQL Single server provides the following benefits:
2525

26-
* Data-access is fully controlled by you by the ability to remove the key and making the database inaccessible
27-
* Full control over the key-lifecycle, including rotation of the key to align with corporate policies
28-
* Central management and organization of keys in Azure Key Vault
29-
* Ability to implement separation of duties between security officers, and DBA and system administrators
26+
* Data-access is fully controlled by you by the ability to remove the key and making the database inaccessible.
27+
* Full control over the key-lifecycle, including rotation of the key to align with corporate policies.
28+
* Central management and organization of keys in Azure Key Vault.
29+
* Enabling encryption does not have any additional performance impact with or without customers managed key (CMK) as PostgreSQL relies on Azure storage layer for data encryption in both the scenarios ,the only difference is when CMK is used **Azure Storage Encryption Key** which performs actual data encryption is encrypted using CMK.
30+
* Ability to implement separation of duties between security officers, and DBA and system administrators.
31+
3032

3133
## Terminology and description
3234

0 commit comments

Comments
 (0)