From the course: Manage Storage in Azure

Unlock this course with a free trial

Join today to access over 25,300 courses taught by industry experts.

Encryption at rest and in transit

Encryption at rest and in transit

From the course: Manage Storage in Azure

Start my 1-month free trial Buy for my team

Encryption at rest and in transit

“

- [Instructor] Securing data with encryption protects the data from being viewed or altered by those who should not have access to the data. For Azure Storage, we are primarily concerned with encryption at rest, which is part of the defense to stop an attacker that may obtain a hard drive but not the keys to decrypt the data on it and therefore must break the defense of the encryption to read it. And also encryption in transit where data is intercepted when moving between devices and networks that has already been encrypted before transmission. For encryption at rest, there are a couple of options. For a client, which is writing to a storage account, by default, all data written to any endpoint in Azure Storage is encrypted with Storage Service Encryption, or SSE for short where a Microsoft-managed key is used to encrypt the data. This all happens without cost and without code changes. Microsoft manages the whole process…

Contents