From the course: Microsoft Azure Cosmos DB Developer Specialty (DP-420) Cert Prep: 5 Maintain an Azure Cosmos DB Solution by Microsoft Press

Unlock this course with a free trial

Join today to access over 23,200 courses taught by industry experts.

Implement Always Encrypted

Implement Always Encrypted

- [Instructor] Now, this is a technology that existed for the longest time on the SQL Server side, in fact, that's where it originated. But more recently, now we have Always Encrypted available in Cosmos DB. The idea here is, we know that our data is encrypted at rest, by now we know that it's encrypted in transit, but how can we ensure that the data is encrypted in use? What if there are elements in your JSON documents that are eyes only? That is, that only authorized parties should be able to see. We're not necessarily talking about the entire document, we're just talking about certain elements within that JSON. The beautiful thing about Always Encrypted is it ensures that that sensitive data in your JSON is encrypted no matter where it is, such that somebody might have the ability to tap into the Cosmos DB Data Plane and run queries against those documents in your container, but they would still see the encrypted…

Contents