Encryption at Rest
Learn what encryption is at rest, how it is used in Cosmos DB, and how to use custom encryption keys.
Introduction
Encryption is the process of encoding information, usually through a key. Encoding makes information unreadable by those who don’t possess the decryption key. Encryption at rest is securing the data when it’s resting in a storage device. In case attackers get access to the server storage, they cannot extract meaningful information from it.
Default behaviour
In Cosmos DB, there are two storage device types:
SSDs: These are used as the main storage.
HDD: These are used for backups.
On both types, encryption is enabled by default at no extra cost. The primary encryption keys are called services-managed keys (SMKs) and are managed internally by ...