Is it possible to encrypt the file using key vault and store it in storage account using “Azure Storage Data Movement Library”

Question

I am able to Encrypt and decrypt blobs in Microsoft Azure Storage using Azure Key Vault but is it possible to do the same using Azure Storage Data Movement Library. Following is the code i am using with azure storage data movement library

                    TransferManager.Configurations.ParallelOperations = 32;
            TransferManager.Configurations.BlockSize = 4 * 1024 * 1024;
            ServicePointManager.DefaultConnectionLimit = Environment.ProcessorCount * 8;
            UploadOptions options = new UploadOptions();
            SingleTransferContext context = new SingleTransferContext();
            context.SetAttributesCallback = (destination) =>
            {
                CloudBlob destBlob = destination as CloudBlob;
                destBlob.Properties.ContentType = "application/octet-stream";
            };

            // Start the upload
            await TransferManager.UploadAsync(fileToUpload.InputStream, blob, options, context);

Answer 1

By Encrypt & Decrypt using Key Vault, do you mean this feature in Azure Storage Client library: https://docs.microsoft.com/en-us/azure/storage/storage-client-side-encryption ? DataMovement doesn't support this yet. If you mean to encrypt by yourself and upload the encrypted stream to Azure Storage with DataMovement, your code should just work as long as the stream is fixed length, readable and seekable.

Answer 2

I am able to Encrypt and decrypt blobs in Microsoft Azure Storage using Azure Key Vault but is it possible to do the same using Azure Storage Data Movement Library.

As far as I know, Azure Storage Data Movement Library doesn't support encrypt/decrypt features now. We could find others have reported the issue/feature request.

• Jatin Bhatt asked "Is there a way to encrypt/decrypt using DML?"

  

• Support for client side encryption