[GA] Encrypt storage accounts with customer-managed keys (CMK) using an Azure Key Vault hosted on a different Azure Active Directory tenant. You can use this solution to encrypt your customers’ data using an encryption key managed by your customers.
Documentation: https://learn.microsoft.com/azure/storage/common/customer-managed-keys-overview
這個功能即可以實現 加密 Storage Account 的 Key 是由 另一個 AAD Tenant 來控管.
HTH. By Jacky 2022-11-14