Transparent data encryption (TDE) helps protect Azure SQL Database, Azure SQL Managed Instance, and Synapse SQL in Azure Synapse Analytics against the threat of malicious offline activity by encrypting data at rest.
For the Hyperscale service tier in Azure SQL Database, TDE with bring your own key (BYOK) support is now available in preview. TDE with BYOK gives full and granular control over usage and management of the database encryption key and enables central management of keys in Azure Key Vault.
Read more about the announcement.