Public Preview: Configure customer-managed keys on existing Cosmos DB accounts

We are pleased to announce that you can now enable Customer Managed Keys (CMK) on existing Azure Cosmos DB accounts. This eliminates the need to migrate data to a new account to enable CMK.

This release follows the existing ability to enable a second layer of encryption for data at rest using CMK while creating a new Azure Cosmos DB account.

Using these features can help you to improve your security and compliance posture.

Learn More:

• Configure customer-managed keys for your existing Azure Cosmos DB accounts! - Azure Cosmos DB Blog (microsoft.com)
• Configure customer-managed keys on existing accounts - Azure Cosmos DB | Microsoft Learn