Forum Discussion

azat1's avatar
azat1
Copper Contributor
Oct 29, 2024

Sentinel CMEK

Hello Everyone - 

has anyone enabled CMEK option in Sentinel along with log analytics? Documentation says that it will impact search jobs inside Sentinel(not sure if this is up to date or not). What best practices did you follow? what experience did you have?

1 Reply

  • Ankit's avatar
    Ankit
    Brass Contributor
    Hello,

    CMEK allows you to manage your own encryption keys for data stored in Azure services, providing an additional layer of security. Enabling CMEK can affect the performance and availability of search jobs in Azure Sentinel. This is due to the additional overhead of key management and encryption/decryption processes.

    Best practice is totally depends on the organization whether the added security of CMEK aligns with your organizational requirements. Consider compliance, regulatory needs, and data sensitivity.

    Thanks:)

Resources