Azure supports various encryption models, such as customer-managed keys in Key Vault, customer-managed keys on customer-controlled hardware, and server-side encryption using service-managed keys. You can also store and manage keys on-premises and in another secure location using client-side encryption.
Azure encryption models
Get Microsoft Azure Architect Technologies: Exam Guide AZ-300 now with O’Reilly online learning.
O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.