data encryption at rest in Azure Postgresql database

Question

All managed dB services on azure have data encryption at rest by default. How to see the status on it for Azure postgresql.? Right now when I do "az postgres server show --name -g" of an existing postgresql server I can see Infrastructure Encryption : disabled..does it mean encrytion at rest if off?
How do I make sure that encryption is on always. Or at least get the right status of it.

Answer 1

Hi Aravind

Thanks for the clarification. As I had mentioned before, Azure server encrypts the data at rest by default and you will not be able to check the status for the encryption.

Only way you can be sure of it is by going through the https://servicetrust.microsoft.com/ website to get information about security and compliance Microsoft Azure follows.

Now coming to the Infrastructure Encryption property that you are seeing. Our Product team has a feature in works where they are trying to provide an opt-in capability to double encrypt the servers with no effect on current default encryption. Once the work is complete, we will provide more guidance.

For now we will try to update API comments and description as soon as possible.

Hope this helps.

Thanks
Navtej S