Does Azure GRS replicate data securely? What are the security controls in Azure GRS?

Question

Does Azure GRS replicate data securely?

What are the security controls in Azure GRS?

Is there a documented / official statement from Microsoft which gives me information on the controls that secure the data replication in GRS? Kindly help with the links.

Answer 1

Hi @H Vaidya ,

Whenever Azure Customer traffic moves between datacenters-- outside physical boundaries not controlled by Microsoft (or on behalf of Microsoft)-- a data-link layer encryption method using the IEEE 802.1AE MAC Security Standards (also known as MACsec) is applied from point-to-point across the underlying network hardware. The packets are encrypted on the devices before being sent, preventing physical “man-in-the-middle” or snooping/wiretapping attacks. Because this technology is integrated on the network hardware itself, it provides line rate encryption on the network hardware with no measurable link latency increase. This MACsec encryption is on by default for all Azure traffic traveling within a region or between regions, and no action is required on customers’ part to enable.

Reference: Encryption of data in transit