Merge pull request #107994 from erindormier/users/erindormier/personalizer

Add Personalizer CMK docs

Author: GitHubber17

articles/cognitive-services/Encryption/cognitive-services-encryption-keys-portal.md

@@ -105,3 +105,4 @@ When you disable customer-managed keys, your Cognitive Services resource is then
 * [Language Understanding service encryption of data at rest](../LUIS/luis-encryption-of-data-at-rest.md)
 * [Content Moderator encryption of data at rest](../Content-Moderator/content-moderator-encryption-of-data-at-rest.md)
 * [Translator encryption of data at rest](../translator/translator-encryption-of-data-at-rest.md)
+* [Personalizer encryption of data at rest](../personalizer/personalizer-encryption-of-data-at-rest.md)

articles/cognitive-services/personalizer/personalizer-encryption-of-data-at-rest.md

@@ -0,0 +1,31 @@
+---
+title: Personalizer service encryption of data at rest
+titleSuffix: Azure Cognitive Services
+description: Personalizer service encryption of data at rest.
+author: erindormier
+manager: venkyv
+ms.service: cognitive-services
+ms.subservice: personalizer
+ms.topic: conceptual
+ms.date: 03/11/2020
+ms.author: egeaney
+#Customer intent: As a user of the Personalizer service, I want to learn how encryption at rest works.
+---
+
+# Personalizer service encryption of data at rest
+
+The Personalizer service automatically encrypts your data when persisted it to the cloud. The Personalizer service encryption protects your data and to help you to meet your organizational security and compliance commitments.
+
+[!INCLUDE [cognitive-services-about-encryption](../../../includes/cognitive-services-about-encryption.md)]
+
+> [!IMPORTANT]
+> Customer-managed keys are only available on the E0 pricing tier. To request the ability to use customer-managed keys, fill out and submit the [Personalizer Service Customer-Managed Key Request Form](https://aka.ms/cogsvc-cmk). It will take approximately 3-5 business days to hear back on the status of your request. Depending on demand, you may be placed in a queue and approved as space becomes available. Once approved for using CMK with the Personalizer service, you will need to create a new Personalizer resource and select E0 as the Pricing Tier. Once your Personalizer resource with the E0 pricing tier is created, you can use Azure Key Vault to set up your managed identity.
+
+[!INCLUDE [cognitive-services-cmk](../../../includes/cognitive-services-cmk-regions.md)]
+
+[!INCLUDE [cognitive-services-cmk](../../../includes/cognitive-services-cmk.md)]
+
+## Next steps
+
+* [Personalizer Service Customer-Managed Key Request Form](https://aka.ms/cogsvc-cmk)
+* [Learn more about Azure Key Vault](https://docs.microsoft.com/azure/key-vault/key-vault-overview)

articles/cognitive-services/personalizer/toc.yml

@@ -107,6 +107,8 @@
     href: https://azure.microsoft.com/global-infrastructure/services/?products=cognitive-services
   - name: Compliance
     href: https://azure.microsoft.com/support/legal/cognitive-services-compliance-and-privacy/
+  - name: Encryption
+    href: personalizer-encryption-of-data-at-rest.md
   - name: Azure Roadmap
     href: https://go.microsoft.com/fwlink/?linkid=2092153
   - name: Pricing