Events
Mar 31, 11 PM - Apr 2, 11 PM
The biggest Fabric, Power BI, and SQL learning event. March 31 – April 2. Use code FABINSIDER to save $400.
Register todayThis browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Every block blob, append blob, or page blob in Azure Storage is encrypted with Azure Storage encryption. This article shows how to determine whether a specific blob has been encrypted.
For more information about Azure Storage encryption, see Azure Storage encryption for data at rest.
Use the Azure portal, PowerShell, or Azure CLI to determine whether a blob is encrypted without code.
To use the Azure portal to check whether a blob has been encrypted, follow these steps:
In the Azure portal, navigate to your storage account.
Select Containers to navigate to a list of containers in the account.
Locate the blob and display its Overview tab.
View the Server Encrypted property. If True, as shown in the following image, then the blob is encrypted. Notice that the blob's properties also include the date and time that the blob was created.
Events
Mar 31, 11 PM - Apr 2, 11 PM
The biggest Fabric, Power BI, and SQL learning event. March 31 – April 2. Use code FABINSIDER to save $400.
Register todayTraining
Certification
Microsoft Certified: Azure Security Engineer Associate - Certifications
Demonstrate the skills needed to implement security controls, maintain an organization’s security posture, and identify and remediate security vulnerabilities.
Documentation
Provide an encryption key on a request to Blob storage - Azure Storage
Clients making requests against Azure Blob storage can provide an encryption key on a per-request basis. Including the encryption key on the request provides granular control over encryption settings for Blob storage operations.
Determine which encryption key model is in use for the storage account - Azure Storage
Use Azure portal, PowerShell, or Azure CLI to check how encryption keys are being managed for the storage account. Keys may be managed by Microsoft (the default), or by the customer. Customer-managed keys must be stored in Azure Key Vault.
Encryption scopes for Blob storage - Azure Storage
Encryption scopes provide the ability to manage encryption at the level of the container or an individual blob. You can use encryption scopes to create secure boundaries between data that resides in the same storage account but belongs to different customers.