Encryption transforms data into an encoded form that requires a key or equivalent secret to recover. Azure Storage encrypts and decrypts account data transparently with 256-bit AES at no extra cost; the encryption meets FIPS 140-2 requirements. section 9.3
Data can also be exposed while moving between a database and client applications. Azure SQL enforces SSL for connections; TLS/SSL encryption helps guard transmissions against interception. A minimum TLS version can be set, balancing stronger connection requirements against support for older clients. section 10.6.3
C:/> az sql server update --name BanningBooksServer --resource-group BanningRG --minimal-tls-version TLS1_2
Set an Azure SQL server's minimum TLS version to 1.2 with Azure CLI. This is identified as the recommended standard at the time described; older clients may require a lower version. section 10.6.3
Encryption is one layer in a broader defense-in-depth approach to protecting data, alongside secure hardware and access policies. section 6.1.1















