Skip to content

Commit 90a2f6a

Browse files
authored
Added back Disclaimers since Sentinel linked to it
1 parent 3f50b83 commit 90a2f6a

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

articles/azure-monitor/platform/customer-managed-keys.md

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,9 @@ This article provides background information and steps to configure customer-Man
1414

1515
We recommend you review [Limitations and constraints](#limitations-and-constraints) below before configuration.
1616

17+
## Disclaimers
18+
19+
The CMK capability is delivered on dedicated Log Analytics clusters. The [Log Analytics clusters pricing model](https://docs.microsoft.com/azure/azure-monitor/platform/manage-cost-storage#log-analytics-dedicated-clusters) uses Capacity Reservations starting at a 1000 GB/day level.
1720

1821
## Customer-managed key (CMK) overview
1922

@@ -23,8 +26,6 @@ Azure Monitor ensures that all data is encrypted at rest using Azure-managed key
2326

2427
Azure Monitor use of encryption is identical to the way [Azure Storage encryption](https://docs.microsoft.com/azure/storage/common/storage-service-encryption#about-azure-storage-encryption) operates.
2528

26-
The CMK capability is delivered on dedicated Log Analytics clusters. The [Log Analytics clusters pricing model](https://docs.microsoft.com/azure/azure-monitor/platform/manage-cost-storage#log-analytics-dedicated-clusters) uses Capacity Reservations starting at a 1000 GB/day level.
27-
2829
Data ingested in the last 14 days is also kept in hot-cache (SSD-backed) for efficient query engine operation. This data remains encrypted with Microsoft keys regardless CMK configuration, but your control over SSD data adheres to [key revocation](#cmk-kek-revocation). We are working to have SSD data encrypted with CMK in the second half of 2020.
2930

3031
The frequency that Azure Monitor Storage accesses Key Vault for wrap and unwrap operations is between 6 to 60 seconds. Azure Monitor Storage always respects changes in key permissions within an hour.

0 commit comments

Comments
 (0)