Are log analytics by default encrypted at rest in Azure Monitor?

Question

Hi,

I'm trying to research the security behind Azure Monitor, specifically Azure Log Analytics. I've read a few articles about Azure Monitor's security as well as Azure's encryption-at-rest document:

https://learn.microsoft.com/en-us/azure/azure-monitor/platform/data-security
https://learn.microsoft.com/en-us/azure/security/fundamentals/encryption-atrest

Two quotes that caught my attention in the second link:
"Organizations have the option of letting Azure completely manage Encryption at Rest."
"Microsoft is committed to encryption at rest options across cloud services and giving customers control of encryption keys and logs of key use. Additionally, Microsoft is working towards encrypting all customer data at rest by default."

Through my research, I've seen people comment that Microsoft has moved forward and has default levels of encryption at rest for all Microsoft services. Is this true, and where can I verify it?

I want the simplest way to verify or set up encryption at rest for Azure Monitor, specifically with respect to encryption at rest for the logs that I'm collecting with Azure. Any help or guidance is appreciated.

Thank you!

Answer 1

@Matthew Pointer The data stored in log analytics is encrypted at rest by default and you have an option to encrypt the data at rest using customer managed keys. For more information, kindly go through this document and revert if you have further questions.