Azure Storage SSE and AKV integration where Storage account and AKV are in different subscriptions and tenant
Currently Azure Storage SSE with BYOK using AKV is supported only whne both are in same tenant and subscription.
Request to support where AKV can be in differnet subscription and AD tenant than Storage account.
Guido Vilariño commented
Having the same issue, it's mind-boggling Azure doesn't support this.
It shouldn't be a requirement for them to be on the same tenant/subscription, as it should be possible to leverage roles and service principals to achieve this. However, since the Portal or CLI does not allow to granularly set any of these, it's currently impossible.