Generally available
Generally Available: Confidential computing for Azure Service Bus Premium
Confidential computing for Azure Service Bus Premium is now generally available in Korea Central and UAE North. This capability enables Service Bus to process messages inside hardware-based trusted execution environments (TEEs), adding protection for data in use on top of existing encryption at rest and in transit. The TEE prevents unauthorized access to data while it is being processed, bringing hardware-level isolation to message handling.
Confidential computing works alongside the security features you can already use with Service Bus today, such as TLS encryption for data in transit, encryption at rest with support for customer-managed keys (CMK), private endpoints, and managed identities. For workloads with the strictest requirements, pairing confidential computing with customer-managed keys backed by Azure Key Vault Managed HSM provides defense in depth across data at rest, in transit, and in use.
Confidential computing is enabled at the namespace level during creation. After it is enabled, all queues, topics, and subscriptions in the namespace benefit from hardware-isolated message processing. No application changes are required, so existing clients and messaging patterns continue to work.
Learn more:
Read the original announcement