Azure Service Bus Encryption at Rest & Transit (Standard Tier)

Antra Sharma 41 Microsoft Employee

Could someone help out in answering this question if Azure Service Bus (Standard Tier) also follows encryption at Rest & Transit as it is for Premium Tier.
How could this be verified for a standard tier deployment if encryption is enabled or not.
Is there a possibility that Encryption At Rest is disabled by default?

JayaC-MSFT 5,531 Reputation points

2021-06-07T20:40:37.057+00:00

@Antra Sharma Thank you for the question. We will review and update at the earliest.

Accepted answer

MayankBargali-MSFT 70,536 Reputation points

2021-06-08T01:03:04.66+00:00

@Antra Sharma Azure service bus REST Encryption are only supported in Premium namespace and it cannot be enabled for standard tier Service Bus namespaces. As premium namespace uses Azure Storage to store the data therefor it provides encryption data at rest with Azure Storage Service Encryption (Azure SSE).
Fore more details please refer to this document.
Please sign in to rate this answer.
Zeljko_Bal@VegaIT 0 Reputation points

2024-07-24T14:56:51.88+00:00

Hi @MayankBargali-MSFT , if I understand your answer correctly, you are saying here that data encryption at rest is not available for Service Bus standard tier. Is this contradictory to what was concluded in this Github thread https://github.com/MicrosoftDocs/azure-docs/issues/65992#issuecomment-729887996? Could you please clarify?

To make it clear, my question is not about encryption at rest using customer-managed keys, but encryption at rest in general e.g. using platform managed keys.

The documentation is not clear to me as it doesn't mention encryption at rest explicitly for the standard tier. In the second link you posted it talks specifically about encryption using customer-managed keys. In the first link you posted (security baseline) on the other hand there are two points "DP-4: Enable data at rest encryption by default" which doesn't mention premium tier as a requirement and "DP-5: Use customer-managed key option in data at rest encryption when required" which does.Can you please confirm if data at-rest encryption using platform keys is supported and enabled by default for service bus standard tier?
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Your answer

Share via

Azure Service Bus Encryption at Rest & Transit (Standard Tier)

1 additional answer

Your answer