Does EFCore support Cosmos DB always encrypt?

[jianawu]

Ask a question

Hi, I am trying to use cosmosdb with EFCore.
While using, I have to store sensitive data like user name and password. I believe I could straightly use always encrypt with Cosmosdb client. However, I failed to find the way to use this feature in EFCore.

Does EFCore support this feature and how could I achieve that?

Thank you!

[ajcvickers]

Note for triage: this probably requires creating the client using With Encryption().

https://docs.microsoft.com/en-us/azure/cosmos-db/how-to-always-encrypted?tabs=dotnet#initialize-the-sdk

[jianawu]

Hi ajckickers, thanks for your reply! Yes, I believe I should use WithEncryption() and enable policy on container. But, I wonder how could I integrate it in EFCore? I mean where could configure the client and container so that I could use EFCore as usual and encrypt at the same time? Should I write some delegate or overwrite some of the functions while creating db client or handling container?

[ajcvickers]

@jianawu We will discuss in our next triage meeting.

[jhulbertpmn]

Very interested in this as well!

[jhulbertpmn]

Any news on this?

[ajcvickers]

This issue is in the Backlog milestone. This means that it is not planned for the next release (EF Core 8.0). We will re-assess the backlog following the this release and consider this item at that time. However, keep in mind that there are many other high priority features with which it will be competing for resources. Make sure to vote (👍) for this issue if it is important to you.