Azure Java SDK - Programmatically create encryption scope for an existing storage account

Question

For an existing storage account, I would like to create an encryption scope. I checked out Azure documentation but only found REST way of creating it (https://learn.microsoft.com/en-us/rest/api/storagerp/encryption-scopes/put?tabs=HTTP)

I couldn't find references for programmatically handling encryption scopes. Could you please share how we achieve this.

Answer 1

@PR Management of encryption scopes falls under the ARM/SRP package (com.azure.resourcemanager:azure-resourcemanager-storage). See:

• https://learn.microsoft.com/en-us/java/api/com.azure.resourcemanager.storage.fluent.encryptionscopesclient?view=azure-java-stable
• https://search.maven.org/artifact/com.azure.resourcemanager/azure-resourcemanager-storage/2.22.0/jar

Does this help? Please let me know if you need any further help and I will be glad to help. Thank you!

Answer 2

Can someone please help with this.

Answer 3

@SaiKishor-MSFT Thanks for responding.

EncryptedBlobClientBuilder encryptionScope(String encryptionScope)

But I believe before this, first encryption scope needs to be created and only then the name can be passed here. My question is, how to get encryption scope created in the first place programmatically. whatever we are achieving in the below dialog, I want to do it programmatically. Could you please help with some references for both Microsoft managed and Customer managed.

Answer 4

@PR Thanks for reaching out to Microsoft Q&A. I understand that you are looking for assistance in regard to creating encryption scope for an existing storage account.

You should be able to do that using the following method- https://learn.microsoft.com/en-us/java/api/com.azure.storage.blob.specialized.cryptography.encryptedblobclientbuilder?view=azure-java-stable#com-azure-storage-blob-specialized-cryptography-encryptedblobclientbuilder-encryptionscope(java-lang-string)

public EncryptedBlobClientBuilder encryptionScope(String encryptionScope)

Sets the encryption scope that is used to encrypt blob contents on the server.

Parameters:

encryptionScope - Encryption scope containing the encryption key information.
Returns:

the updated EncryptedBlobClientBuilder object

---

Is this what you are looking for? Please let us know if you have any more questions and we will be glad to assist you further. Thank you!

Remember:

Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.

Want a reminder to come back and check responses? Here is how to subscribe to a notification.