Support for Azure Key Vault Managed HSM (hardware security module) with customer managed keys (CMK) is now generally available in Azure Database for MySQL - Flexible Server. Managed HSM is a fully managed, highly available, single-tenant, and FIPS 140-2 Level 3 standard-compliant cryptographic processor that doesn’t store or process your data outside of the region where you deploy the HSM instance. With Managed HSM support, you can better protect your data at rest in Azure Database for MySQL - Flexible Server by importing your own HSM-backed encryption keys from a physical, on-premises HSM. Configure Managed HSM using the Azure Portal or Azure CLI.
Learn more.