Azure Disk Encryption
E937637
Azure Disk Encryption is a Microsoft Azure security feature that encrypts virtual machine disks using industry-standard encryption technologies to protect data at rest in the cloud.
All labels observed (1)
| Label | Occurrences |
|---|---|
| Azure Disk Encryption canonical | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T11655789 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: Azure Disk Encryption Context triple: [Azure Key Vault, integratesWith, Azure Disk Encryption]
-
A.
Azure Key Vault
Azure Key Vault is a Microsoft Azure cloud service that securely stores and manages cryptographic keys, secrets, and certificates for protecting applications and data.
-
B.
Azure Backup
Azure Backup is a cloud-based backup and recovery service that protects on-premises and Azure workloads by securely storing data in Microsoft’s Azure platform.
-
C.
Azure Recovery Services vault
Azure Recovery Services vault is an Azure cloud resource that securely stores and manages backup and recovery data for virtual machines, workloads, and other protected resources.
-
D.
Azure Security Center
Azure Security Center is a cloud security management and threat protection service that helps monitor, harden, and defend workloads running in Microsoft Azure and hybrid environments.
-
E.
Azure Information Protection
Azure Information Protection is a Microsoft cloud-based solution that classifies, labels, and protects sensitive documents and emails through encryption and rights management across organizations.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: Azure Disk Encryption Target entity description: Azure Disk Encryption is a Microsoft Azure security feature that encrypts virtual machine disks using industry-standard encryption technologies to protect data at rest in the cloud.
-
A.
Azure Key Vault
Azure Key Vault is a Microsoft Azure cloud service that securely stores and manages cryptographic keys, secrets, and certificates for protecting applications and data.
-
B.
Azure Backup
Azure Backup is a cloud-based backup and recovery service that protects on-premises and Azure workloads by securely storing data in Microsoft’s Azure platform.
-
C.
Azure Recovery Services vault
Azure Recovery Services vault is an Azure cloud resource that securely stores and manages backup and recovery data for virtual machines, workloads, and other protected resources.
-
D.
Azure Security Center
Azure Security Center is a cloud security management and threat protection service that helps monitor, harden, and defend workloads running in Microsoft Azure and hybrid environments.
-
E.
Azure Information Protection
Azure Information Protection is a Microsoft cloud-based solution that classifies, labels, and protects sensitive documents and emails through encryption and rights management across organizations.
- F. None of above. chosen
Statements (44)
| Predicate | Object |
|---|---|
| instanceOf |
Azure security feature
ⓘ
disk encryption technology ⓘ |
| appliesTo | Azure virtual machine disks ⓘ |
| category |
cloud security
ⓘ
data protection ⓘ |
| configuration | enabled at the VM or disk level ⓘ |
| dependsOn |
Azure Active Directory identities for key access
ⓘ
Azure Key Vault access policies ⓘ |
| developedBy | Microsoft ⓘ |
| documentationURL | https://learn.microsoft.com/azure/virtual-machines/disk-encryption-overview ⓘ |
| encrypts |
Azure VM temporary disks (in some configurations)
ⓘ
OS disks ⓘ data disks ⓘ |
| goal | prevent unauthorized access to data if disks are stolen or copied ⓘ |
| helpsMeet | regulatory requirements for data protection ⓘ |
| improves | compliance posture ⓘ |
| integratesWith | Azure Security Center (now Microsoft Defender for Cloud) recommendations ⓘ |
| management |
configurable via Azure CLI
ⓘ
configurable via Azure Portal ⓘ configurable via Azure PowerShell ⓘ configurable via Azure Resource Manager templates ⓘ |
| partOf | Microsoft Azure NERFINISHED ⓘ |
| protects | data at rest ⓘ |
| provides | encryption at rest for Azure VM disks ⓘ |
| regionAvailability | most Azure public regions ⓘ |
| requires |
Azure Key Vault for key management
ⓘ
supported VM sizes and OS images ⓘ |
| scope | Infrastructure as a Service virtual machines ⓘ |
| securityProperty |
confidentiality of stored data
ⓘ
defense in depth for Azure workloads ⓘ |
| stores | encryption keys in Azure Key Vault ⓘ |
| supports |
Azure Resource Manager-based deployments
ⓘ
Linux virtual machines ⓘ Windows virtual machines ⓘ customer-managed keys ⓘ encryption of attached data volumes ⓘ encryption of boot volume ⓘ encryption of both managed and unmanaged disks (subject to platform support lifecycle) ⓘ encryption status reporting via Azure APIs ⓘ platform-managed keys (depending on configuration and evolution of service) ⓘ role-based access control for key operations via Azure Key Vault ⓘ |
| uses |
BitLocker
NERFINISHED
ⓘ
DM-Crypt NERFINISHED ⓘ industry-standard encryption technologies ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: Azure Disk Encryption Description of subject: Azure Disk Encryption is a Microsoft Azure security feature that encrypts virtual machine disks using industry-standard encryption technologies to protect data at rest in the cloud.
Referenced by (1)
Full triples — surface form annotated when it differs from this entity's canonical label.