Customer-managed key
A customer-managed key is a cryptographic key whose lifecycle and access permissions are controlled by the customer rather than solely by the service provider.
Azure Security
A customer-managed key is cryptographic key material whose lifecycle and access are controlled by the Azure customer rather than the service provider.
- How it is used
- Uses customer-controlled keys to protect Azure Storage encryption rather than relying solely on Microsoft-managed keys.
- How deep it goes
- Walks through Key Vault setup, key creation, managed-identity authorization, storage configuration, and encryption scopes.
- Examples
- Demonstrates Azure CLI creation of a Key Vault, key, system-assigned identity, RBAC assignment, storage encryption, and CMK encryption scope.
- What you can do after
- Operate/configure Azure Storage encryption with a Key Vault-backed key and managed-identity access.
MongoDB 8.0 in Action, Third Edition
A customer-managed key is a cryptographic key whose lifecycle and access permissions are controlled by the customer rather than solely by the service provider.
- How it is used
- Protects Atlas data at rest while giving customers control over key access, lifecycle, compliance, and provider revocation.
- How deep it goes
- Explains layered CMK, DEK, database-key, and node-startup behavior, then stops short of provider-specific setup commands.
- Examples
- Uses AWS KMS architecture, per-database keys, per-node DEKs, encrypted Atlas snapshots, and restore credentials as concrete examples.
- What you can do after
- Operate/configure Atlas encryption with customer-controlled keys and preserve the credentials required to restore encrypted backups.
Read how MongoDB 8.0 in Action, Third Edition explains customer-managed key →
Related concepts
- Azure Storageused by · Azure Storage is Microsoft’s cloud storage platform, providing services for storing and accessing data such as blobs, files, queues, tables, and disks.
- Azure Key Vaultuses · Azure Key Vault is a Microsoft Azure managed service for securely storing and controlling access to secrets, cryptographic keys, and certificates.
- Azure OpenAIconfigured by · Azure OpenAI Service is Microsoft’s managed Azure cloud service for accessing OpenAI models through Azure-hosted deployments, APIs, infrastructure, and controls.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.