Generally Available: Azure Database for PostgreSQL Flexible Server supports cross-tenant customer-managed keys (CMK)
- Feed
- Azure Updates · original
- Microsoft id
571783- Availability
- General Availability: September 2026
- Tags
- Databases, Feature, Hybrid + multicloud
- First captured by us
- Microsoft last modified
Description
Azure Database for PostgreSQL Flexible Server now supports cross-tenant customer-managed keys (CMK). You can encrypt your data using keys stored in an Azure Key Vault or Azure Managed HSM that resides in a different Microsoft Entra tenant than your PostgreSQL server. This update is ideal for SaaS providers and ISVs that need to keep database operations and key ownership in separate tenants.
With cross-tenant CMK, you can keep full control of your encryption keys while applications and databases run in a service provider's tenant. This separation helps you meet security and compliance requirements by keeping key management independent from service operations, while allowing you to manage key rotation and revocation on your terms.
Learn more
Quoted from Azure Updates (source). Reproduced for reporting and archival purposes.
What Microsoft changed
We have seen one version of this item so far. If Microsoft edits it, the earlier version stays here with the difference highlighted.