Information sitting in storage, whether on a disk, in a database or in a storage account. By default, Azure keeps such data encrypted.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Data at rest in context, with comparison tables and the common traps.
Terms in this definition
- General-purpose v1
The older storage account kind (
Storage), which lacks access tiers, Archive and premium file shares and retires on 13 October 2026. Converting to ZRS requires first upgrading to GPv2, a one-way change. - Schema
The middle part of a Unity Catalog name (
catalog.schema.table), grouping tables, views, volumes, functions and models inside a catalog. A grant on it covers everything in it now and later, and nothing inside can be reached withoutUSE SCHEMA. - Storage account
The top-level resource in Azure Storage, giving a unique namespace for table, queue, file and blob data. Location, performance and kind are set when it is created and cannot change.
Related terms
- Cloud KMS
Stores the keys for software encryption of data at rest in Microsoft Azure Key Vault. Only Prism Central offers this option.
- External KMS
A separate key server for encrypting data at rest. It is mandatory with SEDs and dual encryption, and optional for software-only encryption as an alternative to Native KMS.
- Key Management Server
Stores encryption keys protecting Nutanix data at rest. Options are External KMS, Cloud KMS, or Native KMS in a local or remote form.
- Microsoft-managed keys
The keys Azure uses by default to encrypt data at rest, which it creates, stores, rotates and backs up for you free of charge. If you must control the keys yourself, you use customer-managed keys held in Key Vault or Managed HSM instead.