Azure Bring Your Own Key (BYOK) is a capability of Azure Key Vault that allows customers to use encryption keys generated and managed outside Microsoft Azure. Using BYOK, customers can import externally created keys into Azure Key Vault and use them for encrypting Azure resources while retaining ownership and control of the key material.
