keyVaultKeyId

To use customer managed keys from Azure Key Vault, provide the AKV Key ID. To use service managed keys, omit this field.

NOTE: In order to use customer managed keys, the identity of the MSSQL server must have the following permissions on the key vault: 'get', 'wrapKey' and 'unwrapKey' NOTE: If server_id denotes a secondary server deployed for disaster recovery purposes, then the key_vault_key_id should be the same key used for the primary server's transparent data encryption. Both primary and secondary servers should be encrypted with same key material.