Skip to content

Commit 89c37b8

Browse files
authored
Merge pull request #100885 from tamram/revert-99371-tamram-1218
Revert "encryption with CMK - support for queues & tables"
2 parents 31b41f2 + 106868b commit 89c37b8

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

articles/storage/common/storage-service-encryption.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -34,15 +34,15 @@ For more information about the cryptographic modules underlying Azure Storage en
3434

3535
You can rely on Microsoft-managed keys for the encryption of your storage account, or you can manage encryption with your own keys. If you choose to manage encryption with your own keys, you have two options:
3636

37-
- You can specify a *customer-managed key* with Azure Key Vault to use for encrypting and decrypting data in your storage account. The customer-managed key is used to encrypt all data in the account, including blob, queue, table, and file data.
37+
- You can specify a *customer-managed key* with Azure Key Vault to use for encrypting and decrypting data in Blob storage and in Azure Files.
3838
- You can specify a *customer-provided key* on Blob storage operations. A client making a read or write request against Blob storage can include an encryption key on the request for granular control over how blob data is encrypted and decrypted.
3939

4040
The following table compares key management options for Azure Storage encryption.
4141

4242
| | Microsoft-managed keys | Customer-managed keys | Customer-provided keys |
4343
|----------------------------------------|-------------------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------|----------------------------------------------------------------------------------|
4444
| Encryption/decryption operations | Azure | Azure | Azure |
45-
| Azure Storage services supported | All | All | Blob storage |
45+
| Azure Storage services supported | All | Blob storage, Azure Files | Blob storage |
4646
| Key storage | Microsoft key store | Azure Key Vault | Azure Key Vault or any other key store |
4747
| Key rotation responsibility | Microsoft | Customer | Customer |
4848
| Key usage | Microsoft | Azure portal, Storage Resource Provider REST API, Azure Storage management libraries, PowerShell, CLI | Azure Storage REST API (Blob storage), Azure Storage client libraries |

0 commit comments

Comments
 (0)