Key management

Generally Available: External key management for Azure Key Vault Managed HSM

External key management for Azure Key Vault Managed HSM is now generally available in all Azure public regions.

Generally Available: Azure Cloud HSM hardware audit logging

Hardware Audit Logging for Azure Cloud HSM provides hardware-generated audit records for supported HSM management operations, helping organizations strengthen security monitoring, compliance reporting, governance, and forensic investigations.

Retirement: Azure Key Vault Secrets Provider Extension for Azure Arc enabled Kubernetes clusters

The Azure Key Vault Secrets Provider Extension for Azure Arc-enabled Kubernetes will be retired on October 9, 2027. Customers currently using the extension should plan to migrate to the Azure Key Vault Secret Store Extension before the retirement date.

Preview: Cloud EKM supports external key migration.

For keys with the EXTERNAL or EXTERNAL_VPC protection levels, you can create new key versions with either of these protection levels.

Generally Available: Azure Developer CLI (azd) Extension Framework

The Azure Developer CLI (azd) Extension Framework is now generally available. The framework enables developers, teams, and partners to extend Azure Developer CLI with custom capabilities that support their preferred application development workflows.

Cloud KMS supports deleting key rings in General Availability.

For more information about deleting Cloud KMS resources, see Delete Cloud KMS resources.

Public Preview: Symmetric keys on Azure Key Vault Premium

We’re announcing post-quantum resilient symmetric keys on Azure Key Vault Premium are now available in public preview.

AWS KMS now tracks last usage of all KMS keys

AWS Key Management Service (KMS) now provides visibility into the last cryptographic operation performed with your KMS keys, eliminating the need to manually query and analyze logs.