Azure HDInsight has several enterprise security enhancements to announce:
- Azure HDInsight now supports customer-managed key encryption with Azure Key Vault for data encryption at rest across different cluster types. Learn more about customer-managed key disk encryption.
- As previously announced, starting on June 30, 2020, HDInsight will enforce transport layer security (TLS) 1.2 or later versions for all HTTPS connections. Configure your new HDInsight clusters to accept only TLS 1.2 now by following the steps in the documentation.
- The ID broker feature of HDInsight, now in preview, simplifies complex authentication setups. This feature allows you to sign in to Apache Ambari through Azure Multi-Factor Authentication without needing password hashes in Azure Active Directory Domain Services (AD DS). Learn more about using ID broker for credential management.