liveBook · Manning

Encryption

As explained in Microsoft Azure in Action

Encryption is the transformation of data into an encoded form that requires a key or equivalent secret to recover the original content.

Encryption transforms data into an encoded form that requires a key or equivalent secret to recover. Azure Storage encrypts and decrypts account data transparently with 256-bit AES at no extra cost; the encryption meets FIPS 140-2 requirements. section 9.3

Data can also be exposed while moving between a database and client applications. Azure SQL enforces SSL for connections; TLS/SSL encryption helps guard transmissions against interception. A minimum TLS version can be set, balancing stronger connection requirements against support for older clients. section 10.6.3

C:/> az sql server update --name BanningBooksServer 
--resource-group BanningRG --minimal-tls-version TLS1_2

Set an Azure SQL server's minimum TLS version to 1.2 with Azure CLI. This is identified as the recommended standard at the time described; older clients may require a lower version. section 10.6.3

Encryption is one layer in a broader defense-in-depth approach to protecting data, alongside secure hardware and access policies. section 6.1.1

How Microsoft Azure in Action covers it

How deep it goes
Explains transparent AES-256 storage encryption and TLS/SSL in transit, then demonstrates setting an Azure SQL minimum TLS version.
Examples
Uses Azure Storage's transparent AES-256 encryption and an Azure CLI command setting Azure SQL's minimum TLS version.
What you can do after
Configure Azure SQL's minimum TLS version using Azure CLI.
How it connects
Connects encryption with Azure Storage, Azure SQL, TLS, SSL, and defense in depth.

Also explained in

Compare how 16 books explain encryption →

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Microsoft Azure in Action. The section links point to the parts of the book it draws on.