Package com.azure.resourcemanager.storage.models

Interface StorageAccount.UpdateStages.WithEncryption

All Known Subinterfaces:

StorageAccount.Update

Enclosing interface:

StorageAccount.UpdateStages

public static interface StorageAccount.UpdateStages.WithEncryption

The stage of the storage account update allowing to configure encryption settings.

Method Summary

Modifier and Type	Method	Description
StorageAccount.Update	withBlobEncryption()	Deprecated. Azure Storage encryption cannot be disabled.
StorageAccount.Update	withEncryptionKeyFromKeyVault(String keyVaultUri, String keyName, String keyVersion)	Specifies the KeyVault key to be used as key for encryption and the system-assigned identity to access the KeyVault, meaning this Storage Account will be encrypted with Customer-managed keys.
StorageAccount.Update	withEncryptionKeyFromKeyVault(String keyVaultUri, String keyName, String keyVersion, Identity userAssignedIdentity)	Specifies the KeyVault key to be used as key for encryption and the user-assigned identity to access the KeyVault, meaning this Storage Account will be encrypted with Customer-managed keys.
StorageAccount.Update	withEncryptionKeyFromKeyVault(String keyVaultUri, String keyName, String keyVersion, String userAssignedIdentityId)	Specifies the KeyVault key to be used as key for encryption and the user-assigned identity to access the KeyVault, meaning this Storage Account will be encrypted with Customer-managed keys.
StorageAccount.Update	withFileEncryption()	Deprecated. Azure Storage encryption cannot be disabled.
StorageAccount.Update	withMicrosoftManagedEncryptionKey()	Specifies the Microsoft-managed key to be used as key for encryption.
StorageAccount.Update	withoutBlobEncryption()	Deprecated. Azure Storage encryption cannot be disabled.
StorageAccount.Update	withoutFileEncryption()	Deprecated. Azure Storage encryption cannot be disabled.

Method Details

withBlobEncryption

@Deprecated
StorageAccount.Update withBlobEncryption()

Deprecated.

Azure Storage encryption cannot be disabled.

Enables encryption for blob service.

Returns:

the next stage of storage account update

withFileEncryption

@Deprecated
StorageAccount.Update withFileEncryption()

Deprecated.

Azure Storage encryption cannot be disabled.

Enables encryption for file service.

Returns:

he next stage of storage account update

withoutBlobEncryption

@Deprecated
StorageAccount.Update withoutBlobEncryption()

Deprecated.

Azure Storage encryption cannot be disabled.

Disables encryption for blob service.

Returns:

the next stage of storage account update

withoutFileEncryption

@Deprecated
StorageAccount.Update withoutFileEncryption()

Deprecated.

Azure Storage encryption cannot be disabled.

Disables encryption for file service.

Returns:

he next stage of storage account update

withEncryptionKeyFromKeyVault

StorageAccount.Update withEncryptionKeyFromKeyVault(String keyVaultUri,
 String keyName,
 String keyVersion)

Specifies the KeyVault key to be used as key for encryption and the system-assigned identity to access the KeyVault, meaning this Storage Account will be encrypted with Customer-managed keys. This requires managed service identity on storage account (via StorageAccount.UpdateStages.WithManagedServiceIdentity.withSystemAssignedManagedServiceIdentity()), and GET, WRAP_KEY, UNWRAP_KEY access policy on key vault for the managed service identity.

Parameters:

keyVaultUri - the uri to KeyVault

keyName - the KeyVault key name

keyVersion - the KeyVault key version

Returns:

the next stage of storage account update

withEncryptionKeyFromKeyVault

StorageAccount.Update withEncryptionKeyFromKeyVault(String keyVaultUri,
 String keyName,
 String keyVersion,
 Identity userAssignedIdentity)

Specifies the KeyVault key to be used as key for encryption and the user-assigned identity to access the KeyVault, meaning this Storage Account will be encrypted with Customer-managed keys. This requires managed service identity on storage account (via StorageAccount.UpdateStages.WithManagedServiceIdentity.withSystemAssignedManagedServiceIdentity() or StorageAccount.DefinitionStages.WithUserAssignedManagedServiceIdentity.withExistingUserAssignedManagedServiceIdentity(Identity)), and GET, WRAP_KEY, UNWRAP_KEY access policy on key vault for the managed service identity.

Parameters:

keyVaultUri - the uri to KeyVault

keyName - the KeyVault key name

keyVersion - the KeyVault key version

userAssignedIdentity - user-assigned identity to access the KeyVault

Returns:

the next stage of storage account update

withEncryptionKeyFromKeyVault

StorageAccount.Update withEncryptionKeyFromKeyVault(String keyVaultUri,
 String keyName,
 String keyVersion,
 String userAssignedIdentityId)

Specifies the KeyVault key to be used as key for encryption and the user-assigned identity to access the KeyVault, meaning this Storage Account will be encrypted with Customer-managed keys. This requires managed service identity on storage account (via StorageAccount.UpdateStages.WithManagedServiceIdentity.withSystemAssignedManagedServiceIdentity() or StorageAccount.DefinitionStages.WithUserAssignedManagedServiceIdentity.withExistingUserAssignedManagedServiceIdentity(Identity)), and GET, WRAP_KEY, UNWRAP_KEY access policy on key vault for the managed service identity.

Parameters:

keyVaultUri - the uri to KeyVault

keyName - the KeyVault key name

keyVersion - the KeyVault key version

userAssignedIdentityId - ID of the user-assigned identity to access the KeyVault

Returns:

the next stage of storage account update

withMicrosoftManagedEncryptionKey

StorageAccount.Update withMicrosoftManagedEncryptionKey()

Specifies the Microsoft-managed key to be used as key for encryption. This is the default encryption type.

Returns:

the next stage of storage account update