Key Vault Actions performed by Azure Technologies that assist Client-Side Encryption include encryption of traffic with this are: Azure SQL Database between Azure datacenters. Shared access Transparent Data signatures Technologies that assist Encryption Storage account Azure Table Encryption with this are: access keys HTTPS/REST API Storage account Storage account endpoints endpoints StorSimple Performed by the appliance Performed by the customer Performed by the using AES-256 encryption by using transport customer by using native with Cipher Block Chaining encryption of traffic protections within the (CBC) prior to saving to the traversing exposed physical installed operating mapped Azure storage or virtual machine network system to authenticate account. endpoints. Performed by and authorize access to the appliance using SSL attached StorSimple encryption. volumes. Performed by the appliance by using authentication protocols (such as CHAP), ACLs, network access control, and Role-Based Access Control (RBAC). Feature References BitLocker Drive Encryption Key Vault Encrypt and decrypt blobs in Microsoft Azure
Key Vault Client-Side Encryption Azure SQL Database Transparent Data Encryption Azure Table Encryption Actions performed by Azure include encryption of traffic between Azure datacenters. Technologies that assist with this are: HTTPS/REST API Storage account endpoints Technologies that assist with this are: Shared access signatures Storage account access keys Storage account endpoints StorSimple Performed by the appliance using AES-256 encryption with Cipher Block Chaining (CBC) prior to saving to the mapped Azure storage account. Performed by the customer by using transport encryption of traffic traversing exposed physical or virtual machine network endpoints. Performed by the appliance using SSL encryption. Performed by the customer by using native protections within the installed operating system to authenticate and authorize access to attached StorSimple volumes. Performed by the appliance by using authentication protocols (such as CHAP), ACLs, network access control, and Role-Based Access Control (RBAC). Feature References BitLocker Drive Encryption Key Vault Encrypt and decrypt blobs in Microsoft Azure
Hybrid%20Cloud%20-%20Azure%20Reference%20Architecture%20-%20Partner.docx