In Key vault it says 4000 transactions per 10 sec. What does transactions stands for here.

Aditya Vashisth 25 Reputation points
2023-07-04T06:02:44.9766667+00:00

We are planning to associate some good amount of VMs to a particular key vault with n number of keys. I see the 4000 transactions per 10 sec in the details of it. Will there be any latency issue while read/write to the VMs which are associated if the number of VMs and keys gets increased in the particular Key Vault. Also please let us know if any limitations with Disk Encryption Set as well.

Azure Key Vault
Azure Key Vault
An Azure service that is used to manage and protect cryptographic keys and other secrets used by cloud apps and services.
1,156 questions
Azure Storage Accounts
Azure Storage Accounts
Globally unique resources that provide access to data management services and serve as the parent namespace for the services.
2,800 questions
Azure Disk Encryption
Azure Disk Encryption
An Azure service for virtual machines (VMs) that helps address organizational security and compliance requirements by encrypting the VM boot and data disks with keys and policies that are controlled in Azure Key Vault.
162 questions
{count} votes

1 answer

Sort by: Most helpful
  1. TP 80,511 Reputation points
    2023-07-04T06:59:49.76+00:00

    Hi Aditya,

    A transaction is any successful authenticated REST API call to the vault. Some examples (incomplete list) are create, delete, wrap, unwrap, list, get, encrypt, decrypt.

    Off the top of my head I can't think of any specific limitations related to disk encryption sets and key vaults other than they need to have access to the vault. If you have specific concern about them please add a comment below.

    A single key vault should be able to handle a significant number of VMs using Customer Managed Keys for their disk encryption.

    What you can do is monitor the metrics on the vault and see how many requests are coming in as well as average latency as you increase the number of VMs. Most common "burst" is when a VM is Started there will be some transactions against the key vault from storage.

    Please click Accept Answer if the above was useful.

    Thanks.

    -TP