Confidential computing for Azure Service Bus Premium is now
generally available in Korea Central and UAE North. This
capability enables Service Bus to process messages inside hardware-based
trusted execution environments (TEEs), adding protection for data in use on top
of existing encryption at rest and in transit. The TEE prevents unauthorized
access to data while it is being processed, bringing hardware-level isolation
to message handling.
Confidential computing works alongside the security features
you can already use with Service Bus today, such as TLS encryption for data in
transit, encryption at rest with support for customer-managed keys (CMK),
private endpoints, and managed identities. For workloads with the strictest
requirements, pairing confidential computing with customer-managed keys backed
by Azure Key Vault Managed HSM provides defense in depth across data at rest,
in transit, and in use.
Confidential computing is enabled at the namespace level
during creation. After it is enabled, all queues, topics, and subscriptions in
the namespace benefit from hardware-isolated message processing. No application
changes are required, so existing clients and messaging patterns continue to
work.
Learn more: