Customer-managed keys (CMK) for Azure VMware Solution (AVS) provides you with control over your encrypted vSAN data on Azure VMware Solution. With this feature, you can use Azure Key Vault to generate customer-managed keys as well as centralize and streamline the key management process. This includes the following:
- Revoke access any time and protect your data from within your private cloud.
- Rotate encryption key in Azure Key Vault per your compliance policies requirement.
- Full integration with Azure Monitor and Azure Log Analytics for complete audit logs and alerts.
Learn more about customer-managed keys for Azure VMware Solution.