WORLDTECHMicrosoft gives European customers new controls over sovereign cloud access and keys
Microsoft has updated its Sovereign Cloud to give European customers tighter control over who can reach critical workloads and the encryption keys that protect them, according to a report by SC Media.
Oversight tools and customer-held keys
Microsoft announced the Sovereign Cloud updates on Oct. 20. The package adds Data Guardian and Production Touch Ledger, features intended to strengthen oversight of remote access by engineers, and European partners can use them to track access to production systems.
External key management through Azure Managed Hardware Security Module is now generally available, so organisations can keep control of their encryption keys. Encryption scrambles data so that only the holder of the key can read it. A new Sovereign Control Panel offers centralised visibility inside the Azure portal.
Partner responsibilities and offline operation
For managed service providers and systems integrators, the updates require clearly assigned duties for access reviews, key recovery and incident handling. Partners are encouraged to test their operating models carefully, so that recovery procedures and administrative access still work if disruptions occur.
Microsoft is also widening disconnected-operation options through Sovereign Private Cloud, which lets workloads run without constant connectivity.
Open questions
- How will partners divide responsibilities for access reviews and key recovery in practice?