Using AMD based confidential VMs for your Azure Data Explorer clusters
summary
Claims that ADX can encrypt data while in memory using AMD EPYC SEV-SNP and demonstrates creation of a confidential cluster with the ECasv5 SKU, enabling customer managed keys from Key Vault and assigning a user-assigned identity via the portal. Shows lift‑and‑shift migration to confidential SKUs with no code changes, notes limited region availability, and walks through the portal steps end to end — the demo completes successfully and the cluster reports CMK-protected confidential VM status.
AI-written summary · about
chapters (5)
- 0:00Start
- 3:09ADX Confidential Computing Solution: Based on AMD EPYC SEV-SNP technology
- 4:14AMD Confidential Computing Solution-protection use cases
- 5:42Azure Data Explorer Confidential Computing solution
- 7:33How to create an ADX Confidential Cluster w/ CMK Encryption using User assigned identity
related talks
16mSecure data processing with AMD Confidential VMs on Azure Databricks
23mAMD SEV & Azure Local: When Confidential VMs Go Local
13mVM Security with Confidential Computing
22mSecuring the Future with Azure Confidential Computing
43mConfidential development with Always Encrypted using enclaves
36mCTO Panel: The Impact of Confidential Computing with Intel, Azure, AMD & NVIDIA
30mK8s meets confidential computing - the different ways of scaling sensitive workloads
45mConfidential Computing: Protecting Customer Data in the Cloud