Azure Storage Encrytion Scope performance

Nimisha Srinivasa 26 Reputation points Microsoft Employee
2022-08-04T20:49:52.91+00:00

The docs for Encryption Scopes for Blob storage does not talk about the performance implications when Encryption Scopes are used. Is there a recommended limit on the number of scopes that can be created within a given storage account after which we start seeing higher latencies?
Note: Manually updating the customer managed keys is not an issue for our use case.

Azure Storage Accounts
Azure Storage Accounts
Globally unique resources that provide access to data management services and serve as the parent namespace for the services.
2,686 questions
Azure Blob Storage
Azure Blob Storage
An Azure service that stores unstructured data in the cloud as blobs.
2,427 questions
Azure Disk Encryption
Azure Disk Encryption
An Azure service for virtual machines (VMs) that helps address organizational security and compliance requirements by encrypting the VM boot and data disks with keys and policies that are controlled in Azure Key Vault.
160 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. SaiKishor-MSFT 17,186 Reputation points
    2022-08-09T18:21:49.767+00:00

    @Nimisha Srinivasa Thank you for your patience while I was looking into this issue.

    There is no limit for number of encryption scopes in a storage account and no performance implications.
    The limit is for number of encryption scopes that can be configured with key auto-rotation- https://learn.microsoft.com/en-us/azure/storage/blobs/encryption-scope-overview#key-management

    A storage account may have up to 10,000 encryption scopes that are protected with customer-managed keys for which the key version is automatically updated. If your storage account already has 10,000 encryption scopes that are protected with customer-managed keys that are being automatically updated, then the key version must be updated manually for any additional encryption scopes that are protected with customer-managed keys.

    Hope this helps. Please let us know if you have any further questions and we will be glad to assist you further. Thank you!

    Remember:

    Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.

    Want a reminder to come back and check responses? Here is how to subscribe to a notification.