Explanation:
Box 1: Transparent Data Encryption (TDE and customer-managed keys
SQL serverless pools
Encryption of data at rest
A complete Encryption-at-Rest solution ensures the data is never persisted in unencrypted form.
Double encryption of data at rest mitigates threats with two, separate layers of encryption to protect against compromises of any single layer. Azure Synapse Analytics offers a second layer of encryption for the data in your workspace with a customer-managed key. This key is safeguarded in your Azure Key Vault, which allows you to take ownership of key management and rotation.
The data in the following Synapse components is encrypted with the customer-managed key configured at the workspace level:
SQL pools
*-> Dedicated SQL pools
*-> Serverless SQL pools
Data Explorer pools
Apache Spark pools
Azure Data Factory integration runtimes, pipelines, datasets.
Box 2: Transparent Data Encryption (TDE and customer-managed keys
Azure Synapse Analytics SQL dedicated pools
Secure a dedicated SQL pool (formerly SQL DW) in Azure Synapse Analytics Encryption Transparent Data Encryption (TDE) helps protect against the threat of malicious activity by encrypting and decrypting your data at rest. When you encrypt your database, associated backups and transaction log files are encrypted without requiring any changes to your applications. TDE encrypts the storage of an entire database by using a symmetric key called the database encryption key.
Customer-managed transparent data encryption - Bring Your Own Key
Customer-managed TDE is also referred to as Bring Your Own Key (BYOK) support for TDE. In this scenario, the TDE Protector that encrypts the DEK is a customer-managed asymmetric key, which is stored in a customer-owned and managed Azure Key Vault (Azure's cloud-based external key management system) and never leaves the key vault.
Reference:
https://learn.microsoft.com/en-us/azure/synapse-analytics/security/workspaces-encryption
https://learn.microsoft.com/en-us/azure/synapse-analytics/sql-data-warehouse/sql-data- warehouse-overview-manage-security
https://learn.microsoft.com/en-us/azure/azure-sql/database/transparent-data-encryption-tde- overview