transparent Data Encryption Key Vault Key Id
Parameters
value
The fully versioned Key Vault
Key
URL (e.g. 'https://<YourVaultName>.vault.azure.net/keys/<YourKeyName>/<YourKeyVersion>
) to be used as the Customer Managed Key
(CMK/BYOK) for the Transparent Data Encryption
(TDE) layer.
Note: To successfully deploy a
Microsoft SQL Database
in CMK/BYOK TDE theKey Vault
must haveSoft-delete
andpurge protection
enabled to protect from data loss due to accidental key and/or key vault deletion. TheKey Vault
and theMicrosoft SQL Server
User Managed Identity Instance
must belong to the sameAzure Active Directory
tenant
.