Encryption keys applied per blob or per container, layered over the account's own encryption; available for blob storage only.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Encryption scopes in context, with comparison tables and the common traps.
Terms in this definition
- Encryption
Scrambling data so it cannot be read without the correct secret key, which is then used to turn it back again. Hashing, by contrast, cannot be reversed.
- BLOB
Short for binary large object: raw binary data, like pictures, audio, video or documents, that only an application can make sense of. Azure keeps these files as blobs in Blob Storage.
- Container
Something that groups data. Blob Storage containers sit inside a storage account and hold blobs much as folders hold files; Cosmos DB containers hold items and set the scope for partitioning and throughput.
- OVER
Gives a T-SQL window function its window: PARTITION BY, ORDER BY and, if wanted, a ROWS or RANGE frame. Rankings and running totals can then be worked out while every row is kept.
- Blob storage
Azure's object store for unstructured content like images and video; a single block blob can reach roughly 190.7 TiB.
Related terms
- Storage Account Encryption Scope Contributor
Role in Azure Storage restricted to managing encryption scopes, with no access to data or keys.