Encryption at Rest & in Transit

Summary

Encrypting stored data (at rest) and data moving across a network (in transit) — most managed cloud services support this natively, but it's often not enabled by default and needs to be deliberately configured.

• 1Enable encryption at rest on a storage resource and verify it in the console.
• 2Confirm a service's endpoints only accept encrypted (HTTPS/TLS) connections.
• 3Learn the difference between provider-managed keys and customer-managed encryption keys.