Understanding information protection

Sometimes, just storing data securely is not sufficient. We need to protect data even when it is in motion and in use. Azure provides different security features to protect your data at any given time so that you can meet all the data-related compliances. These are as follows:

• Encryption-in-flight (Transport Layer Security – TLS): The Synapse SQL pool secures your data by encrypting data in motion with TLS.
• Encryption-at-rest (Transparent Data Encryption – TDE): TDE encrypts your databases, backups, and logs at rest. This setting is specific to one particular SQL pool. If you create another SQL pool in your Synapse workspace, then you need to enable this setting separately for that pool.

  The following screenshot shows how to enable data encryption for your Synapse SQL pools:

Figure 12.22 – Enabling TDE for the dedicated SQL pool in Azure Synapse

• Encryption-in-use (always encrypted...