Azure Disk Encryption SSE + PMK - Attached to other VM

Question

question

DavidWahby-0289 asked Mar 10, '22 AlanKinane commented Mar 11, '22

Azure Disk Encryption SSE + PMK - Attached to other VM

¿If I have the right permissions to do it , the other virtual machine can access to the data? Example: same region, subscription, resource group

Thanks and Best Regards

azure-disk-encryption

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2022-03-10T16:41:02.77Z

AlanKinane answered Mar 10, '22 AlanKinane commented Mar 11, '22

If I understand your question correctly then yes, other VMs will be able to access the data. SSE is is encryption at rest so protects your data if the storage drives were physically accessed by an intruder.

https://docs.microsoft.com/en-us/azure/security/fundamentals/encryption-atrest

· 2

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DavidWahby-0289 · Mar 11 at 07:52 AM

Thanks @AlanKinane!. Same goes for SSE + CMK?

0 ·

AlanKinane DavidWahby-0289 · Mar 11 at 09:26 AM

Yes, it's the same. The difference with CMK is that you get to manage the encryption key yourself, with PMK it is managed for you by Azure.

0 ·

question