Encryption at rest

- [Instructor] Now that we've dealt with authentication…and authorization we also need to deal with secrecy…of our data.…So select your storage account in the Azure Portal…and scroll down up to where you see Encryption.…In this case I'm looking at just the blob service,…but it's worth noting that the storage service encryption…in this case is currently disabled.…So we can have our data encrypted while at rest,…meaning while it is stored on disk in the Cloud…so that the Azure Storage account essentially does…encryption for us transparently, so when I enable this here,…any blobs I write into the storage account will be encrypted…as they're written and only decrypted…as and when I need them.…

Now this is significant because in the case of our auditors…look at this and Dakesh might look at this,…compromising a storage account currently without encryption…requires only compromising the storage account.…So it's one big target.…But once the data's encrypted at rest, you would need…to compromise two targets, both the storage system…