![\"Free](\"https:\/\/devblogs.microsoft.com\/cosmosdb\/wp-content\/uploads\/sites\/52\/2023\/08\/free-vector-abstract-secure-technology-background-1.jpeg\")
<\/h2>\n<\/h2>\nAzure Cosmos DB strives to provide the best-in-class security features. Encryption of data at rest is one such important security feature. Encryption of data at rest using Microsoft’s service-managed keys is enabled by default.<\/p>\n
In addition to this default encryption, Azure Cosmos DB allows customers to add a second layer of encryption using customer-managed keys or CMK. Currently, this feature is available only during new account creation.<\/p>\n
We are excited to announce General Availability (GA) for enabling Customer Managed Keys (CMK) on your existing Azure Cosmos DB account<\/a>.<\/p>\n Many of our customers wanted to extend encryption at rest with CMK offering on their existing accounts to increase the security posture, in place, as is where is condition, without the migration overheads. This means:<\/p>\n This is a completely online process, which means that there is no downtime. Encryption of existing data happens in the background. Applications can continue to use the Azure Cosmos DB account to reads and writes.<\/p>\n We would love to have you onboard and enable CMK on your existing accounts. Please go through the Azure Cosmos DB to enable CMK on existing accounts documentation<\/a> for the next steps.<\/p>\n Azure Cosmos DB<\/span><\/a> is a fully managed NoSQL and relational database for modern app development with SLA-backed speed and availability, automatic and instant scalability, and support for open-source PostgreSQL, MongoDB and Apache Cassandra.\u00a0<\/span>Try Azure Cosmos DB for free here<\/span><\/a>. To stay in the loop on Azure Cosmos DB updates, follow us on\u00a0<\/span>Twitter<\/span><\/a>,\u00a0<\/span>YouTube<\/span><\/a>, and\u00a0<\/span>LinkedIn<\/span><\/a>.<\/span>\u00a0<\/span><\/p>\n","protected":false},"excerpt":{"rendered":" Encryption options for data at rest on Azure Cosmos DB that is available today. Azure Cosmos DB strives to provide the best-in-class security features. Encryption of data at rest is one such important security feature. Encryption of data at rest using Microsoft’s service-managed keys is enabled by default. In addition to this default encryption, Azure […]<\/p>\n","protected":false},"author":88168,"featured_media":6627,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[14,667],"tags":[499],"class_list":["post-6384","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-core-sql-api","category-security","tag-azure-cosmos-db"],"acf":[],"blog_post_summary":" Encryption options for data at rest on Azure Cosmos DB that is available today. Azure Cosmos DB strives to provide the best-in-class security features. Encryption of data at rest is one such important security feature. Encryption of data at rest using Microsoft’s service-managed keys is enabled by default. In addition to this default encryption, Azure […]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/cosmosdb\/wp-json\/wp\/v2\/posts\/6384","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/cosmosdb\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/cosmosdb\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/cosmosdb\/wp-json\/wp\/v2\/users\/88168"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/cosmosdb\/wp-json\/wp\/v2\/comments?post=6384"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/cosmosdb\/wp-json\/wp\/v2\/posts\/6384\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/cosmosdb\/wp-json\/wp\/v2\/media\/6627"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/cosmosdb\/wp-json\/wp\/v2\/media?parent=6384"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/cosmosdb\/wp-json\/wp\/v2\/categories?post=6384"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/cosmosdb\/wp-json\/wp\/v2\/tags?post=6384"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}How does this feature help?<\/h2>\n
\n
Important considerations to keep in mind.<\/h2>\n
\n
Are there any limitations?<\/h2>\n
\n
Next steps<\/h2>\n