Cmk encryption for Azure Storage account with private endpoint for key vault

Question

I have configured cmk encryption for my azure storage account and have that key in azure key vault. My azure storage account has private endpoint and key vault does not have. The cmk encryption setup was pretty simple and happened.Now can I have private end point for key vault also and still connect to azure storage account via the vnet hosting the private endpoints of azure storage and azure key vault ?

Answer 1

Hi,

Yes, you can use private endpoint for your key vault. On your key vault you want to enable "Allow trusted Microsoft services to bypass this firewall" under Networking so that your storage account will be able to unwrap key.

Please click Accept Answer and upvote if the above was useful.

Thanks.

-TP