Question

You are developing a solution on Microsoft Azure. The data at rest layer must meet the following requirements:

Answer 1

Encryption at rest using AES-256

Automatic key rotation every 90 days

Compliance with SOC 2, SOC 3, PCI DSS, and HIPAA standards

Azure Disk Encryption is a good solution to encrypt data at rest using AES-256 and automatic key rotation every 90 days. Azure also has certifications for SOC 2, SOC 3, PCI DSS, and HIPAA, so using Azure services can help you meet those compliance standards. Another solution to consider is Azure Key Vault, which allows you to manage and rotate encryption keys for data at rest, and can also help with compliance requirements.